1
0
mirror of https://github.com/phpbb/phpbb.git synced 2025-02-24 03:54:10 +01:00
Paul S. Owen 89dddd9049 Code added to get around double htmlspecialchar stuff + some of my stuff looks to allow HTML even when off, removed
git-svn-id: file:///svn/phpbb/trunk@829 89ea8834-ac86-4346-8a33-228a782c2dd0
2001-08-10 00:23:39 +00:00

91 lines
2.4 KiB
PHP

<?php
/***************************************************************************
*
* -------------------
* begin : Saturday, Feb 13, 2001
* copyright : (C) 2001 The phpBB Group
* email : support@phpbb.com
*
* $Id$
*
*
***************************************************************************/
/***************************************************************************
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2 of the License, or
* (at your option) any later version.
*
*
***************************************************************************/
//
// This function will prepare a posted message for
// entry into the database.
//
function prepare_message($message, $html_on, $bbcode_on, $smile_on, $bbcode_uid = 0)
{
global $board_config;
//
// Clean up the message
//
$message = trim($message);
if( !$html_on )
{
$message = htmlspecialchars($message);
}
/* else if($html_on)
{
$start = -1;
$end = 0;
for($h = 0; $h < strlen($message); $h++)
{
$start = strpos($message, "<", $h);
if($start > -1)
{
$end = strpos($message, ">", $start);
if($end)
{
$length = $end - $start + 1;
$tagallowed = 0;
for($i = 0; $i < sizeof($board_config['allow_html_tags']); $i++)
{
$match_tag = trim($board_config['allow_html_tags'][$i]);
list($match_tag_split) = explode(" ", $match_tag);
if( preg_match("/^((\/$match_tag_split$)|($match_tag))[ \=]+/i", substr($message, $start + 1, $length - 2) . " ") )
{
$tagallowed = 1;
}
}
if($length && !$tagallowed)
{
$message = str_replace(substr($message, $start, $length), "", $message);
}
}
$start = -1;
}
}
}
*/
if($bbcode_on)
{
$message = bbencode_first_pass($message, $bbcode_uid);
}
$message = addslashes($message);
return($message);
}
?>