/**
* url_parser.php
*
- * Copyright (c) 1999-2004 The SquirrelMail Project Team
- * Licensed under the GNU GPL. For full terms see the file COPYING.
- *
* This code provides various string manipulation functions that are
- * used by the rest of the Squirrelmail code.
+ * used by the rest of the SquirrelMail code.
*
+ * @copyright © 1999-2009 The SquirrelMail Project Team
+ * @license http://opensource.org/licenses/gpl-license.php GNU Public License
* @version $Id$
* @package squirrelmail
*/
$target_pos = strlen($check_str) + $start;
}
- /* If there was a token to replace, replace it */
- if ($target_token == 'mailto:') { // rfc 2368 (mailto URL)
- $target_pos += 7; //skip mailto:
+ // rfc 2368 (mailto URL)
+ if ($target_token == 'mailto:') {
+ $target_pos += 7; //skip mailto:
$end = $blength;
$mailto = substr($body, $target_pos, $end-$target_pos);
//sm_print_r($regs);
$mailto_before = $target_token . $regs[0];
$mailto_params = $regs[10];
- if ($regs[1]) { //if there is an email addr before '?', we need to merge it with the params
+ if ($regs[1]) { //if there is an email addr before '?', we need to merge it with the params
$to = 'to=' . $regs[1];
- if (strpos($mailto_params, 'to=') > -1) //already a 'to='
+ if (strpos($mailto_params, 'to=') > -1) //already a 'to='
$mailto_params = str_replace('to=', $to . '%2C%20', $mailto_params);
else {
- if ($mailto_params) //already some params, append to them
+ if ($mailto_params) //already some params, append to them
$mailto_params .= '&' . $to;
else
$mailto_params .= '?' . $to;
}
}
- $url_str = str_replace(array('to=', 'cc=', 'bcc='), array('send_to=', 'send_to_cc=', 'send_to_bcc='), $mailto_params);
+ $url_str = preg_replace(array('/to=/i', '/(?<!b)cc=/i', '/bcc=/i'), array('send_to=', 'send_to_cc=', 'send_to_bcc='), $mailto_params);
$comp_uri = makeComposeLink('src/compose.php' . $url_str, $mailto_before);
replaceBlock($body, $comp_uri, $target_pos - 7, $target_pos + strlen($regs[0]));
$target_pos += strlen($comp_uri) - 7;
}
}
else
+ /* If there was a token to replace, replace it */
if ($target_token != '') {
/* Find the end of the URL */
$end = $blength;
}
}
+ /* make sure that there are no 8bit chars between $target_pos and suspected end of URL */
+ if (!is_bool($first8bit=sq_strpos_8bit($body,$target_pos,$end))) {
+ $end = $first8bit;
+ }
+
/* Extract URL */
$url = substr($body, $target_pos, $end-$target_pos);
/* Find all the email addresses in the body */
while (eregi($Email_RegExp_Match, $string, $regs)) {
$addresses[$regs[0]] = strtr($regs[0], array('&' => '&'));
- $start = strpos($string, $regs[0]) + strlen($regs[0]);
- $string = substr($string, $start);
+ $start = strpos($string, $regs[0]) + strlen($regs[0]);
+ $string = substr($string, $start);
}
/* Return the first address, or an empty string if no address was found */
return (array_key_exists(0, $addresses) ? $addresses[0] : '');
}
-?>
\ No newline at end of file
+/**
+ * Finds first occurrence of 8bit data in the string
+ *
+ * Function finds first 8bit symbol or html entity that represents 8bit character.
+ * Search start is defined by $offset argument. Search ends at $maxlength position.
+ * If $maxlength is not defined or bigger than provided string, search ends when
+ * string ends.
+ *
+ * Check returned data type in order to avoid confusion between bool(false)
+ * (not found) and int(0) (first char in the string).
+ * @param string $haystack
+ * @param integer $offset
+ * @param integer $maxlength
+ * @return mixed integer with first 8bit character position or boolean false
+ * @since 1.5.2
+ */
+function sq_strpos_8bit($haystack,$offset=0,$maxlength=false) {
+ $ret = false;
+
+ if ($maxlength===false || strlen($haystack) < $maxlength) {
+ $maxlength=strlen($haystack);
+ }
+
+ for($i=$offset;$i<$maxlength;$i++) {
+ /* rh7-8 compatibility. don't use full 8bit range in regexp */
+ if (preg_match('/[\200-\237]|\240|[\241-\377]/',$haystack[$i])) {
+ /* we have 8bit char. stop here and return position */
+ $ret = $i;
+ break;
+ } elseif ($haystack[$i]=='&') {
+ $substring = substr($haystack,$i);
+ /**
+ * 1. look for "&#(decimal number);" where decimal_number is bigger than 127
+ * 2. look for "&x(hexadecimal number);", where hex number is bigger than x7f
+ * 3. look for any html character entity that is not 7bit html special char. Use
+ * own sq_get_html_translation_table() function with 'utf-8' character set in
+ * order to get all html entities.
+ */
+ if ((preg_match('/^&#(\d+);/',$substring,$match) && $match[1]>127) ||
+ (preg_match('/^&x([0-9a-f]+);/i',$substring,$match) && $match[1]>"\x7f") ||
+ (preg_match('/^&([a-z]+);/i',$substring,$match) &&
+ !in_array($match[0],get_html_translation_table(HTML_SPECIALCHARS)) &&
+ in_array($match[0],sq_get_html_translation_table(HTML_ENTITIES,ENT_COMPAT,'utf-8')))) {
+ $ret = $i;
+ break;
+ }
+ }
+ }
+ return $ret;
+}
projects / squirrelmail.git / blobdiff