') . $param[0] . ($is_blocky_already ? '' : '

]*>.*#U', '', $_displayed_title)); // The regexp is to remove possible FRACTIONAL_EDIT.tpl link } else { if ($ZONE !== null) { $value = get_translated_text($ZONE['zone_header_text']); } } } else { // Take from short title $comcodeless = strip_comcode($SHORT_TITLE); // This is not HTML // Strip 'Welcome to' off if it's there $value = preg_replace('#' . preg_quote(do_lang('WELCOME_TO_STRIPPABLE') . ' ' . get_site_name(), '#') . '([^-]+\s*-\s*)?#', '', $comcodeless); // Strip site name off it it's there (it'll be put on in the templates, so we don't want it twice) $stub = get_site_name() . ' - '; if (substr($value, strlen($stub)) == $stub) { $value = substr($value, strlen($stub)); } if ($value == get_site_name()) { $value = ''; } } $value = trim($value); if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_CANONICAL_URL($lang, $escaped, $param) { global $NON_CANONICAL_PARAMS, $CANONICAL_URL; if ($CANONICAL_URL === null) { $non_canonical = array(); if (is_array($NON_CANONICAL_PARAMS)) { foreach ($NON_CANONICAL_PARAMS as $n) { $non_canonical[$n] = null; } } $CANONICAL_URL = get_self_url(true, false, $non_canonical); } $value = $CANONICAL_URL; if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_SHOW_HEADER($lang, $escaped, $param) { $value = (is_wide_high() == 1) ? '0' : '1'; if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_SHOW_FOOTER($lang, $escaped, $param) { $value = (is_wide_high() == 1) ? '0' : '1'; if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_WIDE($lang, $escaped, $param) { $value = (is_wide() == 1) ? '1' : '0'; if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_WIDE_HIGH($lang, $escaped, $param) { $value = (is_wide_high() == 1) ? '1' : '0'; if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_LOGO_URL($lang, $escaped, $param) { $value = get_logo_url(); if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_HELPER_PANEL_TUTORIAL($lang, $escaped, $param) { if ($GLOBALS['HELPER_PANEL_TUTORIAL'] === null) { set_helper_panel_tutorial(''); } if (get_option('show_docs') == '0') { set_helper_panel_tutorial(''); } $value = $GLOBALS['HELPER_PANEL_TUTORIAL']; if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_HELPER_PANEL_TEXT($lang, $escaped, $param) { if ($GLOBALS['HELPER_PANEL_TEXT'] === null) { $GLOBALS['HELPER_PANEL_TEXT'] = ''; } $value = is_object($GLOBALS['HELPER_PANEL_TEXT']) ? $GLOBALS['HELPER_PANEL_TEXT']->evaluate() : $GLOBALS['HELPER_PANEL_TEXT']; if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_MESSAGES_TOP($lang, $escaped, $param) { $value = ''; if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } if ($GLOBALS['ATTACHED_MESSAGES'] !== null) { $value = static_evaluate_tempcode($GLOBALS['ATTACHED_MESSAGES']); } if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_MESSAGES_BOTTOM($lang, $escaped, $param) { // Extra stuff we can tag on (like messages) $messages_bottom = new Tempcode(); if (get_option('site_closed') == '1') { require_code('global4'); attach_message_site_closed($messages_bottom); } if ($GLOBALS['IS_ACTUALLY_ADMIN']) { require_code('global4'); attach_message_su($messages_bottom); } if (get_param_string('special_page_type', '') == 'memory') { attach_message_memory_usage($messages_bottom); } $value = $messages_bottom->evaluate(); if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_LATE_MESSAGES($lang, $escaped, $param) { $value = ''; if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } if ($GLOBALS['LATE_ATTACHED_MESSAGES'] !== null) { $value = static_evaluate_tempcode($GLOBALS['LATE_ATTACHED_MESSAGES']); } if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_BREADCRUMBS($lang, $escaped, $param) { $show_self = (!isset($param[0]) || $param[0] == '1'); if (!$show_self) { $GLOBALS['BREADCRUMBS'] = null; } $value = static_evaluate_tempcode(breadcrumbs($show_self)); if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_HAS_SU($lang, $escaped, $param) { $value = '0'; if (!is_guest()) { $value = (get_option('show_su') == '1') && (has_privilege(get_member(), 'assume_any_member')) ? '1' : '0'; } if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_STAFF_ACTIONS($lang, $escaped, $param) { $value = ''; if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } if (!is_guest()) { // Different types of page type for staff (debug view, etc) if ((get_option('show_staff_page_actions') == '1') && (has_privilege(get_member(), 'view_profiling_modes')) && (!has_interesting_post_fields())) { // We count POST because we don't want to allow double submits require_code('site2'); $value = get_staff_actions_list(); } } if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_TRIM($lang, $escaped, $param) { $value = ''; if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } if (isset($param[0])) { $value = $param[0]; if ($value !== '') { if (strpos($value, '<') === false && strpos($value, '&') === false) { $value = trim($value); } else { $value = cms_trim($param[0], !isset($param[1]) || $param[1] === '1'); } } } if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Trim some text, supporting removing HTML white-space also. * * @param string $text Input text. * @param boolean $try_hard Whether to keep doing it, while it changes (if complex mixtures are on the end). * @return string The result text. */ function cms_trim($text, $try_hard = true) { if ((preg_match('#[<&]#', $text) === 0) && (memory_get_usage() > 1024 * 1024 * 40)) { return trim($text); // Don't have enough memory } if ($GLOBALS['XSS_DETECT']) { $is_escaped = ocp_is_escaped($text); } // Intentionally not using regexps, as actually using substr is a lot faster and uses much less memory do { $before = $text; $c = substr($text, 0, 1); if ($c === '<') { if (strtolower(substr($text, 1, 1)) === 'b') { if (strtolower(substr($text, 0, 6)) === '
') { $text = substr($text, 6); } if (strtolower(substr($text, 0, 5)) === '
') { $text = substr($text, 5); } if (strtolower(substr($text, 0, 4)) === '
') { $text = substr($text, 4); } } } elseif ($c == '&') { if (strtolower(substr($text, 0, 6)) === ' ') { $text = substr($text, 6); } } $text = ltrim($text); } while (($try_hard) && ($before !== $text)); do { $before = $text; $c = substr($text, -1, 1); if ($c === '>') { if (strtolower(substr($text, -6)) === '
') { $text = substr($text, 0, -6); } if (strtolower(substr($text, -5)) === '
') { $text = substr($text, 0, -5); } if (strtolower(substr($text, -4)) === '
') { $text = substr($text, 0, -4); } } elseif ($c == ';') { if (strtolower(substr($text, -6)) === ' ') { $text = substr($text, 0, -6); } } $text = rtrim($text); } while (($try_hard) && ($before !== $text)); if ($GLOBALS['XSS_DETECT']) { if ($is_escaped) { ocp_mark_as_escaped($text); } } return $text; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_CPF_VALUE($lang, $escaped, $param) { $value = ''; if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } if (isset($param[0])) { if (is_numeric($param[0])) { require_code('cns_members'); $fields = cns_get_custom_fields_member(isset($param[1]) ? intval($param[1]) : get_member()); if (array_key_exists(intval($param[0]), $fields)) { $_value = $fields[intval($param[0])]; } } elseif ((substr($param[0], 0, 2) == 'm_') && (stripos($param[0], 'hash') === false) && (stripos($param[0], 'salt') === false)) { $_value = $GLOBALS['FORUM_DRIVER']->get_member_row_field(isset($param[1]) ? intval($param[1]) : get_member(), $param[0]); } else { if (preg_match('#^[a-z\_\d]*$#', $param[0]) != 0) { $_value = get_cms_cpf($param[0], isset($param[1]) ? intval($param[1]) : null); } else { require_code('cns_members'); $cpf_id = find_cpf_field_id($param[0]); if (!is_null($cpf_id)) { $fields = cns_get_custom_fields_member(isset($param[1]) ? intval($param[1]) : get_member()); if (array_key_exists($cpf_id, $fields)) { $_value = $fields[$cpf_id]; } } else { $_value = ''; } } } if (!is_string($_value)) { $value = is_null($_value) ? '' : strval($_value); } else { $value = $_value; } } if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_BANNER($lang, $escaped, $param) { $value = ''; if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } if (addon_installed('banners')) { global $SITE_INFO; $is_on_banners = ((isset($param[1])) && ($param[1] == '1')) || (((!has_privilege(get_member(), 'banner_free')) || (($GLOBALS['FORUM_DRIVER']->is_super_admin(get_member())) && (get_option('admin_banners') == '1')) || (!is_null($GLOBALS['CURRENT_SHARE_USER'])))); if (!empty($SITE_INFO['throttle_bandwidth_registered'])) { $views_till_now = intval(get_value('page_views')); $bandwidth_allowed = $SITE_INFO['throttle_bandwidth_registered']; $total_bandwidth = intval(get_value('download_bandwidth')); if ($bandwidth_allowed * 1024 * 1024 >= $total_bandwidth) { $is_on_banners = false; } } if (($is_on_banners) && (!is_page_https(get_zone_name(), get_page_name()))) { // We can't show when HTTPS, due to HTTPS security warnings (can't show HTTP requests on HTTPS page, and banner has them by nature). require_code('banners'); $b_type = isset($param[0]) ? $param[0] : ''; if (!$GLOBALS['STATIC_TEMPLATE_TEST_MODE']) { // Normal operation $width = empty($param[1]) ? null : intval($param[1]); $height = empty($param[2]) ? null : intval($param[2]); $region = isset($param[3]) ? $param[3] : null; $name = isset($param[4]) ? $param[4] : null; $_value = banners_script(true, '', $name, $b_type, '', $width, $height, $region); $value = $_value->evaluate(); } else { // Been told to behave statically $value = 'Banner goes here'; } } } if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_AVATAR($lang, $escaped, $param) { $value = $GLOBALS['FORUM_DRIVER']->get_member_avatar_url(isset($param[0]) ? intval($param[0]) : get_member()); if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_IS_GUEST($lang, $escaped, $param) { if (isset($param[0])) { $value = (is_guest(intval($param[0]))) ? '1' : '0'; } else { $value = is_guest() ? '1' : '0'; } if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_MEMBER($lang, $escaped, $param) { if (!isset($param[0])) { $value = strval(get_member()); } else { $member_id = $GLOBALS['FORUM_DRIVER']->get_member_from_username($param[0]); $value = is_null($member_id) ? '' : strval($member_id); } if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_REQUIRE_CSS($lang, $escaped, $param) { if (isset($param[0])) { require_css($param[0]); } $value = ''; if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_IS_HTTPAUTH_LOGIN($lang, $escaped, $param) { $value = is_httpauth_login() ? '1' : '0'; if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_MEMBER_PROFILE_URL($lang, $escaped, $param) { $member_id = ((!is_null($param)) && (isset($param[0]))) ? intval($param[0]) : get_member(); $value = $GLOBALS['FORUM_DRIVER']->member_profile_url($member_id, false, true); if (is_object($value)) { $value = $value->evaluate(); } if (is_null($value)) { $value = ''; } if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_USERNAME($lang, $escaped, $param) { $member_id = (isset($param[0])) ? intval($param[0]) : get_member(); $value = $GLOBALS['FORUM_DRIVER']->get_username($member_id, (isset($param[1])) && ($param[1] == '1')); if ($value === null) { $value = do_lang('UNKNOWN'); } if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_DISPLAYED_USERNAME($lang, $escaped, $param) { $value = ''; if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } if (isset($param[0])) { $value = get_displayname($param[0]); } if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_CYCLE($lang, $escaped, $param) { $value = ''; if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } if (isset($param[0])) { global $CYCLES; if (!isset($CYCLES[$param[0]])) { $CYCLES[$param[0]] = 0; } if (!isset($param[1])) { // If we can't find a param simply return the index. Poor-mans cycle reader. $value = strval($CYCLES[$param[0]]); } else { // Cycle if (count($param) == 2) { $param = array_merge(array($param[0]), explode(',', $param[1])); } ++$CYCLES[$param[0]]; if (!array_key_exists($CYCLES[$param[0]], $param)) { $CYCLES[$param[0]] = 1; } $value = $param[$CYCLES[$param[0]]]; } } if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_THUMBNAIL($lang, $escaped, $param) { require_code('images'); $value = _symbol_thumbnail($param); if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_IS_IN_GROUP($lang, $escaped, $param) { $value = ''; if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } if (isset($param[0])) { if (in_array($param[count($param) - 1], array('', 'primary', 'secondary'))) { $last_param = $param[count($param) - 1]; unset($param[count($param) - 1]); } else { $last_param = ''; } $member_id = get_member(); $new_param = ''; $param_2 = array(); foreach ($param as $group) { if ((substr($group, 0, 1) == '@') && (is_numeric(substr($group, 1)))) { $member_id = intval(substr($group, 1)); } else { $param_2 = array_merge($param_2, explode(',', $group)); } } foreach ($param_2 as $group) { if ($new_param != '') { $new_param .= ','; } $new_param .= $group; } if ($last_param == 'primary') { $member_row = $GLOBALS['FORUM_DRIVER']->get_member_row($member_id); $real_group_list = array($GLOBALS['FORUM_DRIVER']->mrow_group($member_row)); } elseif ($last_param == 'secondary') { $real_group_list = $GLOBALS['FORUM_DRIVER']->get_members_groups($member_id); $member_row = $GLOBALS['FORUM_DRIVER']->get_member_row($member_id); $real_group_list = array_diff($real_group_list, array($GLOBALS['FORUM_DRIVER']->mrow_group($member_row))); } else { $real_group_list = $GLOBALS['FORUM_DRIVER']->get_members_groups($member_id); } require_code('selectcode'); $value = (count(array_intersect(selectcode_to_idlist_using_memory($new_param, $GLOBALS['FORUM_DRIVER']->get_usergroup_list()), $real_group_list)) != 0) ? '1' : '0'; } if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_IS_STAFF($lang, $escaped, $param) { if ((isset($GLOBALS['FORUM_DRIVER'])) && (function_exists('get_member'))) { $value = $GLOBALS['FORUM_DRIVER']->is_staff(((!is_null($param)) && (isset($param[0]))) ? intval($param[0]) : get_member()) ? '1' : '0'; } else { $value = '0'; } if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_IS_ADMIN($lang, $escaped, $param) { if ((isset($GLOBALS['FORUM_DRIVER'])) && (function_exists('get_member'))) { $value = $GLOBALS['FORUM_DRIVER']->is_super_admin(((!is_null($param)) && (isset($param[0]))) ? intval($param[0]) : get_member()) ? '1' : '0'; } else { $value = '0'; } if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_PHOTO($lang, $escaped, $param) { $value = ''; if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } if (isset($param[0])) { $value = $GLOBALS['FORUM_DRIVER']->get_member_photo_url(intval($param[0])); } if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_CNS_RANK_IMAGE($lang, $escaped, $param) { $value = ''; if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } if (addon_installed('cns_forum')) { require_code('cns_groups'); $rank_images = new Tempcode(); $member_id = isset($param[0]) ? intval($param[0]) : get_member(); $posters_groups = $GLOBALS['FORUM_DRIVER']->get_members_groups($member_id, true); foreach ($posters_groups as $group) { $rank_image = cns_get_group_property($group, 'rank_image'); $group_leader = cns_get_group_property($group, 'group_leader'); $group_name = cns_get_group_name($group); $rank_image_pri_only = cns_get_group_property($group, 'rank_image_pri_only'); if (($rank_image != '') && (($rank_image_pri_only == 0) || ($group == $GLOBALS['FORUM_DRIVER']->get_member_row_field($member_id, 'm_primary_group')))) { $rank_images->attach(do_template('CNS_RANK_IMAGE', array('_GUID' => '513032ef4693abc353f9934e8799943b', 'USERNAME' => $GLOBALS['FORUM_DRIVER']->get_username($member_id), 'GROUP_NAME' => $group_name, 'IMG' => $rank_image, 'IS_LEADER' => $group_leader == $member_id))); } } $value = $rank_images->evaluate(); } if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_URL_FOR_GET_FORM($lang, $escaped, $param) { $value = ''; if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } if (isset($param[0])) { $url_bits = parse_url($param[0]); if (array_key_exists('scheme', $url_bits)) { $value = $url_bits['scheme'] . '://' . (array_key_exists('host', $url_bits) ? $url_bits['host'] : 'localhost'); if ((array_key_exists('port', $url_bits)) && ($url_bits['port'] != 80)) { $value .= ':' . strval($url_bits['port']); } } if (array_key_exists('path', $url_bits)) { $value .= $url_bits['path']; } } if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_HIDDENS_FOR_GET_FORM($lang, $escaped, $param) { $_value = new Tempcode(); $url_bits = parse_url($param[0]); if ((array_key_exists('query', $url_bits)) && ($url_bits['query'] != '')) { foreach (explode('&', $url_bits['query']) as $exp) { $parts = explode('=', $exp, 2); if (count($parts) == 2) { if ((!in_array($parts[0], $param)) && (!in_array(preg_replace('#\d+#', '*', $parts[0]), $param)) && (!in_array(preg_replace('#filter_\w+#', 'filter_*', $parts[0]), $param))) { $_value->attach(form_input_hidden($parts[0], urldecode($parts[1]))); } } } } $value = $_value->evaluate(); if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_NOTIFICATIONS_ENABLED($lang, $escaped, $param) { $value = ''; if (isset($param[0])) { require_code('notifications'); $value = notifications_enabled(array_key_exists(1, $param) ? $param[1] : get_page_name(), $param[0]) ? '1' : '0'; } if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_NOTIFICATIONS_AVAILABLE($lang, $escaped, $param) { $value = '1'; if (isset($param[0])) { $notification_code = $param[0]; require_code('notifications'); if (notification_locked_down($notification_code)) { $value = '0'; } } if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_MAKE_RELATIVE_DATE($lang, $escaped, $param) { $value = ''; if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } if (isset($param[0])) { if ((get_option('use_contextual_dates') == '0') && ((!array_key_exists(1, $param)) || ($param[1] != '1'))) { $value = get_timezoned_date(intval($param[0])); } else { $value = display_time_period(time() - intval($param[0])); } } if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_LOAD_PAGE($lang, $escaped, $param) { $temp_array = array(); handle_symbol_preprocessing(array($escaped, TC_SYMBOL, 'LOAD_PAGE', $param), $temp_array); // Late preprocessing. Should not be needed in case of full screen output (as this was properly preprocessed), but is in other cases foreach ($param as $i => $p) { if (is_object($p)) { $param[$i] = $p->evaluate(); } } global $PAGES_CACHE; if (strpos($param[0], ':') !== false) { $param = array_reverse(explode(':', $param[0], 2)); } $_value = $PAGES_CACHE[serialize($param)]; $value = $_value->evaluate(); if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_RUNNING_SCRIPT($lang, $escaped, $param) { $value = ''; if (isset($param[0])) { $value = running_script($param[0]) ? '1' : '0'; } if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_MATCH_KEY_MATCH($lang, $escaped, $param) { $value = '0'; foreach ($param as $match_key) { if (($match_key == '1') || ($match_key == '0') || ($match_key == '')) { continue; } if (match_key_match($match_key, ((isset($param[1])) && ($match_key == '1')))) { $value = '1'; } } if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_BLOCK($lang, $escaped, $param) { if (!$GLOBALS['STATIC_TEMPLATE_TEST_MODE']) { // Normal operation $temp_array = array(); handle_symbol_preprocessing(array($escaped, TC_SYMBOL, 'BLOCK', $param), $temp_array); // Late preprocessing. Should not be needed in case of full screen output (as this was properly preprocessed), but is in other cases foreach ($param as $i => $p) { if (is_object($p)) { $param[$i] = $p->evaluate(); } } if ((count($param) == 1) && (strpos($param[0], ',') !== false)) { // NB: This code is also in Tempcode.php $param_2 = block_params_str_to_arr($param[0], true); } else { $param_2 = $param; } if (in_array('defer=1', $param_2)) { $value = static_evaluate_tempcode(do_template('JS_BLOCK', array('_GUID' => '2334719e23b2773ad04fe0fcbdce684d', 'BLOCK_PARAMS' => block_params_arr_to_str($param_2)))); } else { global $BLOCKS_CACHE; if (isset($BLOCKS_CACHE[serialize($param_2)])) { // Will always be set $value = $BLOCKS_CACHE[serialize($param_2)]->evaluate(); } else { $value = ''; if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } } } } else { $value = ''; if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } } if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_FORCE_PREVIEWS($lang, $escaped, $param) { if (get_option('forced_preview_option') == '1') { if (get_forum_type() == 'cns') { if ((is_guest()) && (get_option('default_preview_guests') == '0')) { $value = '0'; } else { $value = ($GLOBALS['FORUM_DRIVER']->get_member_row_field(get_member(), 'm_preview_posts') == 1) ? '1' : '0'; } } else { $value = (get_option('default_preview_guests') == '0') ? '0' : '1'; } } else { $value = '0'; } if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_PREVIEW_URL($lang, $escaped, $param) { $value = find_script('preview'); $value .= '?page=' . get_page_name(); $value .= '&type=' . get_param_string('type', '', true); if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_HIDE_HELP_PANEL($lang, $escaped, $param) { $value = ((array_key_exists('hide_helper_panel', $_COOKIE)) && ($_COOKIE['hide_helper_panel'] == '1')) ? '1' : '0'; if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_FIND_SCRIPT_NOHTTP($lang, $escaped, $param) { if ($GLOBALS['DEV_MODE']) {// Dev mode changes base domain so we need to actually use it in full (fine, we don't have HTTPS in dev mode). return ecv_FIND_SCRIPT($lang, $escaped, $param); } $value = preg_replace('#^https?://[^/]+#', '', ecv_FIND_SCRIPT($lang, array(), $param)); if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_FIND_SCRIPT($lang, $escaped, $param) { $value = ''; if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } if ((isset($param[0])) && (function_exists('find_script'))) { $value = find_script($param[0], false, isset($param[1]) ? intval($param[1]) : 0); } if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_CSS_TEMPCODE($lang, $escaped, $param) { $temp_array = array(); handle_symbol_preprocessing(array($escaped, TC_SYMBOL, 'CSS_TEMPCODE', $param), $temp_array); // Late preprocessing. Should not be needed in case of full screen output (as this was properly preprocessed), but is in other cases $_value = css_tempcode(); $value = $_value->evaluate(); if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_JS_TEMPCODE($lang, $escaped, $param) { $temp_array = array(); handle_symbol_preprocessing(array($escaped, TC_SYMBOL, 'JS_TEMPCODE', $param), $temp_array); // Late preprocessing. Should not be needed in case of full screen output (as this was properly preprocessed), but is in other cases $_value = javascript_tempcode(((isset($param[0])) && ($param[0]) != '') ? $param[0] : null); $value = $_value->evaluate(); if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_PAGE_TITLE($lang, $escaped, $param) { global $DISPLAYED_TITLE; $value = is_null($DISPLAYED_TITLE) ? '' : $DISPLAYED_TITLE->evaluate(); if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_EXTRA_HEAD($lang, $escaped, $param) { $value = ''; if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } if ($GLOBALS['EXTRA_HEAD'] !== null) { $_value = $GLOBALS['EXTRA_HEAD']; $value = $_value->evaluate(); } if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_EXTRA_FOOT($lang, $escaped, $param) { $value = ''; if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } if ($GLOBALS['EXTRA_FOOT'] !== null) { $_value = $GLOBALS['EXTRA_FOOT']; if (array_key_exists(0, $param)) { // Set $GLOBALS['EXTRA_FOOT']->attach($param[0]); } else { // Get $value = $_value->evaluate(); } } if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_RAND($lang, $escaped, $param) { if (!$GLOBALS['STATIC_TEMPLATE_TEST_MODE']) { // Normal operation static $before = array(); // Don't allow repeats do { $random = mt_rand(0, mt_getrandmax()); } while (isset($before[$random])); if (count($before) < 2147480000) { $before[$random] = true; } $value = strval($random); } else { // Been told to behave statically $value = '4'; } if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_SET_RAND($lang, $escaped, $param) { $value = ''; if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } if (isset($param[0])) { if (!$GLOBALS['STATIC_TEMPLATE_TEST_MODE']) { // Normal operation $value = $param[mt_rand(0, count($param) - 1)]; } else { // Been told to behave statically $value = $param[0]; } } if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_MEMBER_EMAIL($lang, $escaped, $param) { $value = $GLOBALS['FORUM_DRIVER']->get_member_email_address(isset($param[0]) ? intval($param[0]) : get_member()); if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_HAS_PRIVILEGE($lang, $escaped, $param) { $value = ''; if ((isset($param[0])) && (function_exists('has_privilege'))) { $value = has_privilege(((!is_null($param)) && (isset($param[1]))) ? intval($param[1]) : get_member(), $param[0]) ? '1' : '0'; } if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_HAS_ZONE_ACCESS($lang, $escaped, $param) { $value = ''; if ((isset($param[0])) && (function_exists('has_zone_access'))) { $value = has_zone_access(((!is_null($param)) && (isset($param[1]))) ? intval($param[1]) : get_member(), $param[0]) ? '1' : '0'; } if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_HAS_DELETE_PERMISSION($lang, $escaped, $param) { $value = ''; if (isset($param[1])) { $range = strtolower($param[0]); $owner = intval($param[1]); $member = ((!is_null($param)) && (isset($param[2]))) ? intval($param[2]) : get_member(); $cms_page = ((!is_null($param)) && (isset($param[3]))) ? $param[3] : get_page_name(); if (array_key_exists(5, $param)) { $value = has_delete_permission($range, $member, $owner, $cms_page, array($param[5], $param[6])) ? '1' : '0'; } else { $value = has_delete_permission($range, $member, $owner, $cms_page) ? '1' : '0'; } } if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_DATE_AND_TIME($lang, $escaped, $param) { $use_contextual_dates = (isset($param[0]) && ($param[0] == '1')); $verbose = (isset($param[1]) && ($param[1] == '1')); $server_time = (isset($param[2]) && ($param[2] == '1')); $time = ((isset($param[3])) && ($param[3] != '')) ? intval($param[3]) : time(); $member = isset($param[4]) ? intval($param[2]) : null; $value = get_timezoned_date($time, true, $verbose, $server_time, !$use_contextual_dates, $member); if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_DATE($lang, $escaped, $param) { $use_contextual_dates = (isset($param[0]) && ($param[0] === '1')); $verbose = (isset($param[1]) && ($param[1] === '1')); $server_time = (isset($param[2]) && ($param[2] === '1')); $time = (!empty($param[3])) ? intval($param[3]) : time(); $member = isset($param[4]) ? intval($param[2]) : null; $value = get_timezoned_date($time, false, $verbose, $server_time, !$use_contextual_dates, $member); if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_TIME($lang, $escaped, $param) { $time = (!empty($param[0])) ? intval($param[0]) : time(); $use_contextual_dates = (isset($param[1]) && ($param[1] === '1')); $server_time = (isset($param[2]) && ($param[2] === '1')); $member = isset($param[3]) ? intval($param[3]) : null; $value = get_timezoned_time($time, !$use_contextual_dates, $member, $server_time); if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_FROM_TIMESTAMP($lang, $escaped, $param) { if (isset($param[0])) { $timestamp = (!empty($param[1])) ? intval($param[1]) : time(); if ($GLOBALS['STATIC_TEMPLATE_TEST_MODE']) { $timestamp = intval(placeholder_date_raw()); } if ((!array_key_exists(2, $param)) || ($param[2] === '1')) { $timestamp = utctime_to_usertime($timestamp); } $value = locale_filter(cms_strftime($param[0], $timestamp)); if ($value === $param[0]) {// If no conversion happened then the syntax must have been for 'date' not 'strftime' $value = date($param[0], $timestamp); } } else { if ($GLOBALS['STATIC_TEMPLATE_TEST_MODE']) { $value = placeholder_date_raw(); } else { $timestamp = time(); $value = strval($timestamp); } } if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_DEV_MODE($lang, $escaped, $param) { $value = $GLOBALS['DEV_MODE'] ? '1' : '0'; if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_BROWSER_MATCHES($lang, $escaped, $param) { $value = ''; if (isset($param[0])) { $q = false; foreach (explode('|', $param[0]) as $browser) { $q = browser_matches($browser); if ($q) { break; } } $value = $q ? '1' : '0'; } if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_INIT($lang, $escaped, $param) { $value = ''; if (isset($param[1])) { global $TEMPCODE_SETGET; if (!isset($TEMPCODE_SETGET[$param[0]])) { $TEMPCODE_SETGET[$param[0]] = $param[1]; } } if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_INC($lang, $escaped, $param) { $value = ''; if (isset($param[0])) { global $TEMPCODE_SETGET; if (!isset($TEMPCODE_SETGET[$param[0]])) { $TEMPCODE_SETGET[$param[0]] = '0'; } $TEMPCODE_SETGET[$param[0]] = strval(intval($TEMPCODE_SETGET[$param[0]]) + 1); } if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_PREG_REPLACE($lang, $escaped, $param) { $value = ''; if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } if (isset($param[2])) { $GLOBALS['SUPPRESS_ERROR_DEATH'] = true; $value = preg_replace('#' . str_replace('#', '\#', $param[0]) . '#' . (isset($param[3]) ? str_replace('e', '', $param[3]) : ''), $param[1], $param[2]); $GLOBALS['SUPPRESS_ERROR_DEATH'] = false; if (isset($php_errormsg)) { attach_message($php_errormsg, 'warn'); } if ($GLOBALS['XSS_DETECT'] && ocp_is_escaped($param[0])) { ocp_mark_as_escaped($value); } } if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_MAX($lang, $escaped, $param) { $value = ''; if (isset($param[0])) { $value = strval(max(intval($param[0]), intval($param[1]))); } if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_MIN($lang, $escaped, $param) { $value = ''; if (isset($param[0])) { $value = strval(min(intval($param[0]), intval($param[1]))); } if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_DIV_FLOAT($lang, $escaped, $param) { $value = ''; if (isset($param[1])) { $value = float_to_raw_string(floatval($param[0]) / floatval($param[1]), 20, true); } if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_DIV($lang, $escaped, $param) { if (floatval($param[1]) == 0.0) { $value = 'divide-by-zero'; } else { if (floatval($param[1]) == 0.0) { $value = 'divide-by-zero'; } else { $value = strval(intval(floor(floatval($param[0]) / floatval($param[1])))); } } if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_LCASE($lang, $escaped, $param) { $value = ''; if (isset($param[0])) { $value = cms_mb_strtolower($param[0]); } if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } if ($GLOBALS['XSS_DETECT'] && ocp_is_escaped($param[0])) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv__POST($lang, $escaped, $param) { $value = ''; if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } if (isset($param[0])) { $value = post_param_string($param[0], isset($param[1]) ? $param[1] : ''); } if ((!has_solemnly_declared(I_UNDERSTAND_XSS)) && ($escaped === array())) { $escaped = array(ENTITY_ESCAPED); } if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_REPLACE($lang, $escaped, $param) { $value = ''; if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } if (isset($param[2])) { $value = str_replace($param[0], $param[1], $param[2]); } if ($GLOBALS['XSS_DETECT'] && ocp_is_escaped($param[0])) { ocp_mark_as_escaped($value); } if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_IN_STR($lang, $escaped, $param) { $value = ''; if (isset($param[1])) { if ($param[1] == '') { // Would generate a PHP notice $value = '0'; } else { $value = '0'; foreach ($param as $i => $check) { if ((is_integer($i)) && ($i != 0) && ($check != '')) { if (strpos($param[0], $check) !== false) { $value = '1'; break; } } } } } if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_SUBSTR_COUNT($lang, $escaped, $param) { $value = ''; if (isset($param[1])) { $value = strval(substr_count($param[0], $param[1])); } if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_SUBSTR($lang, $escaped, $param) { $value = ''; if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } if (isset($param[1])) { $value = cms_mb_substr($param[0], intval($param[1]), isset($param[2]) ? intval($param[2]) : strlen($param[0])); } if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_ALTERNATOR_TRUNCATED($lang, $escaped, $param) // Alternate values according to whether some given text WOULD have been truncated. 0: text to check against, 1: the truncate length, 2:IF would not be do this, 3: if it would be do this, 4: whether given text is encoded as HTML (0=no [default, plain-text], 1=yes) { $value = ''; if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } if (isset($param[3])) { $amount = intval($param[1]); $is_html = ((isset($param[4])) && ($param[4] == '1')); if (strlen($is_html ? strip_tags($param[0]) : $param[0]) > $amount) { $value = $param[3]; } else { $value = $param[2]; } } if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_EQ($lang, $escaped, $param) { $value = ''; if (!isset($param[0])) { $param[0] = ''; } if (!isset($param[1])) { $param[1] = ''; } $first = array_shift($param); $count = 0; foreach ($param as $test) { if ($first == $test) { $count++; break; } } $value = ($count !== 0) ? '1' : '0'; if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_NEQ($lang, $escaped, $param) { $value = ''; if (!isset($param[0])) { $param[0] = ''; } if (!isset($param[1])) { $param[1] = ''; } $first = array_shift($param); $count = 0; foreach ($param as $test) { if ($first == $test) { $count++; } } $value = ($count === 0) ? '1' : '0'; if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_NOT($lang, $escaped, $param) { $value = '1'; if (isset($param[0])) { $value = ($param[0] == '1') ? '0' : '1'; } if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_OR($lang, $escaped, $param) { $value = ''; $count = 0; foreach ($param as $test) { if ($test == '1') { $count++; } } $value = ($count > 0) ? '1' : '0'; if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_AND($lang, $escaped, $param) { $count = 0; $total = 0; foreach ($param as $test) { if ($test === '1') { $count++; } $total++; } $value = ($count === $total) ? '1' : '0'; if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_NOR($lang, $escaped, $param) { $count = 0; foreach ($param as $test) { if ($test === '1') { $count++; } } $value = ($count > 0) ? '0' : '1'; if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_NAND($lang, $escaped, $param) { $count = 0; foreach ($param as $test) { if ($test === '1') { $count++; } } $value = ($count === count($param)) ? '0' : '1'; if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_GT($lang, $escaped, $param) { $value = ''; if (isset($param[1])) { $value = (intval($param[0]) > intval($param[1])) ? '1' : '0'; } if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_INSERT_SPAMMER_BLACKHOLE($lang, $escaped, $param) { static $done_once = false; $value = ''; if (!$GLOBALS['STATIC_TEMPLATE_TEST_MODE']) { if (get_option('spam_blackhole_detection') == '1' && !$done_once && get_page_name() != 'members'/*in case of some weird autocomplete issue when changing your password*/) { $field_name = 'y' . md5(get_site_name() . ': antispam'); $tag = ((isset($param[0])) && ($param[0] == '1')) ? 'span' : 'div'; $value .= '<' . $tag . ' id="' . escape_html($field_name) . '_wrap" style="display:none">' . do_lang('DO_NOT_FILL_ME_SPAMMER_BLACKHOLE') . ''; if (!$GLOBALS['SEMI_DEV_MODE']) { $value .= ''; } $done_once = true; } require_code('csrf_filter'); $value .= ''; } if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_HONEYPOT_LINK($lang, $escaped, $param) { $value = ''; if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } $honeypot_url = get_option('honeypot_url'); if (($honeypot_url != '') && (!is_null($honeypot_url))) { $first_char = substr(md5(get_page_name()), 0, 1); $bot_phrase = get_option('honeypot_phrase'); switch ($first_char) { case '0': case '1': $value = '<' . '!-- ' . escape_html($bot_phrase) . ' -->'; break; case '2': case '3': $value = ''; break; case '4': case '5': $value = '' . escape_html($bot_phrase) . ''; break; case '6': case '7': $value = '

' . escape_html($bot_phrase) . '

'; break; case '8': case '9': $value = ''; break; case 'a': case 'b': $value = '<' . '!-- ' . escape_html($bot_phrase) . ' -->'; break; case 'c': case 'd': $value = '

' . escape_html($bot_phrase) . '

'; break; case 'e': $value = '' . escape_html($bot_phrase) . ''; break; case 'f': $value = '

'; break; } } if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_COMMENT_COUNT($lang, $escaped, $param) { $value = ''; if (isset($param[1])) { static $cache_comment_count = array(); $cache_key = $param[0] . '_' . $param[1]; if (isset($cache_comment_count[$cache_key])) { $value = $cache_comment_count[$cache_key]; } else { if (get_option('is_on_comments') == '1') { $count = 0; $_comments = $GLOBALS['FORUM_DRIVER']->get_forum_topic_posts($GLOBALS['FORUM_DRIVER']->find_topic_id_for_topic_identifier(get_option('comments_forum_name'), $cache_key), $count, 0, 0, false); if (($count != 0) || (!array_key_exists(2, $param)) || ($param[2] == '0')) { if (is_array($_comments)) { $_value = do_lang_tempcode('_COMMENTS', escape_html(integer_format($count))); } else { $_value = do_lang_tempcode('_COMMENTS', escape_html(integer_format(0))); } $value = $_value->evaluate(); } } else { $value = do_lang('VIEW'); } $cache_comment_count[$cache_key] = $value; } } if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_SELF_URL($lang, $escaped, $param) { $extra_params = null; $value = ''; if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } if (isset($param[3])) { $extra_params = array(); $i = 3; while (isset($param[$i])) { $bits = explode('=', $param[$i], 2); if (count($bits) == 2) { if ($bits[1] == '') { $bits[1] = null; } $extra_params[$bits[0]] = $bits[1]; } $i++; } } $root_if_posted = (isset($param[0])) && ($param[0] == '1'); $posted_too = (isset($param[1])) && ($param[1] == '1'); $avoid_remap = (isset($param[2])) && ($param[2] == '1'); $value = get_self_url(true, $root_if_posted, $extra_params, $posted_too, $avoid_remap); if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_REVIEW_STATUS($lang, $escaped, $param) { $value = ''; if ($GLOBALS['XSS_DETECT']) { ocp_mark_as_escaped($value); } if (isset($param[1])) { if (addon_installed('content_reviews')) { require_code('content_reviews'); $value = show_content_reviews($param[0], $param[1], array_key_exists(2, $param) ? intval($param[2]) : 0); } } if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv__POSTED($lang, $escaped, $param) { return (cms_srv('REQUEST_METHOD') == 'POST') ? '1' : '0'; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_EXTEND_URL($lang, $escaped, $param) { $value = isset($param[0]) ? $param[0] : ''; $append = isset($param[1]) ? $param[1] : ''; extend_url($value, $append); if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; } /** * Evaluate a particular Tempcode symbol. * * @ignore * * @param LANGUAGE_NAME $lang The language to evaluate this symbol in (some symbols refer to language elements). * @param array $escaped Array of escaping operations. * @param array $param Parameters to the symbol. For all but directive it is an array of strings. For directives it is an array of Tempcode objects. Actually there may be template-style parameters in here, as an influence of singular_bind and these may be Tempcode, but we ignore them. * @return string The result. */ function ecv_ENSURE_PROTOCOL_SUITABILITY($lang, $escaped, $param) { $value = ensure_protocol_suitability(isset($param[0]) ? $param[0] : ''); if ($escaped !== array()) { apply_tempcode_escaping($escaped, $value); } return $value; }