X-Git-Url: https://vcs.fsf.org/?p=squirrelmail.git;a=blobdiff_plain;f=functions%2Furl_parser.php;h=3aff9f7e134613afed626074837ce1831d85d5ea;hp=55ebb3abe66e06beda1c81bb81ecf9d67e15b2b0;hb=dc64848b4a4558f44fd987eb57bb4c2fa40ecd85;hpb=7efaee4f876ee4a5d59bab63a9d63416fe9b79a1 diff --git a/functions/url_parser.php b/functions/url_parser.php index 55ebb3ab..3aff9f7e 100644 --- a/functions/url_parser.php +++ b/functions/url_parser.php @@ -3,13 +3,12 @@ /** * url_parser.php * - * Copyright (c) 1999-2003 The SquirrelMail Project Team - * Licensed under the GNU GPL. For full terms see the file COPYING. - * * This code provides various string manipulation functions that are - * used by the rest of the Squirrelmail code. + * used by the rest of the SquirrelMail code. * - * $Id$ + * @copyright © 1999-2009 The SquirrelMail Project Team + * @license http://opensource.org/licenses/gpl-license.php GNU Public License + * @version $Id$ * @package squirrelmail */ @@ -26,6 +25,10 @@ function replaceBlock (&$in, $replace, $start, $end) { * to be made to the pattern * Make sure that the expression is evaluated case insensitively * + * RFC2822 (and RFC822) defines the left side of an email address as (roughly): + * 1*atext *("." 1*atext) + * where atext is: a-zA-Z0-9!#$%&'*+-/=?^_`{|}~ + * * Here's pretty sophisticated IP matching: * $IPMatch = '(2[0-5][0-9]|1?[0-9]{1,2})'; * $IPMatch = '\[?' . $IPMatch . '(\.' . $IPMatch . '){3}\]?'; @@ -35,8 +38,10 @@ global $IP_RegExp_Match, $Host_RegExp_Match, $Email_RegExp_Match; $IP_RegExp_Match = '\\[?[0-9]{1,3}(\\.[0-9]{1,3}){3}\\]?'; $Host_RegExp_Match = '(' . $IP_RegExp_Match . '|[0-9a-z]([-.]?[0-9a-z])*\\.[a-z][a-z]+)'; -$Email_RegExp_Match = '[0-9a-z]([-_.+]?[0-9a-z])*(%' . $Host_RegExp_Match . - ')?@' . $Host_RegExp_Match; +$atext = '([a-z0-9!#$&%*+/=?^_`{|}~-]|&)'; +$dot_atom = $atext . '+(\.' . $atext . '+)*'; +$Email_RegExp_Match = $dot_atom . '(%' . $Host_RegExp_Match . ')?@' . + $Host_RegExp_Match; /** * Parses a body and converts all found email addresses to clickable links. @@ -45,21 +50,23 @@ $Email_RegExp_Match = '[0-9a-z]([-_.+]?[0-9a-z])*(%' . $Host_RegExp_Match . * @return int the number of unique addresses found */ function parseEmail (&$body) { - global $color, $Email_RegExp_Match; + global $Email_RegExp_Match; $sbody = $body; $addresses = array(); /* Find all the email addresses in the body */ while(eregi($Email_RegExp_Match, $sbody, $regs)) { - $addresses[$regs[0]] = $regs[0]; + $addresses[$regs[0]] = strtr($regs[0], array('&' => '&')); $start = strpos($sbody, $regs[0]) + strlen($regs[0]); $sbody = substr($sbody, $start); } + /* Replace each email address with a compose URL */ - foreach ($addresses as $email) { - $comp_uri = makeComposeLink('src/compose.php?send_to='.urlencode($email), $email); - $body = str_replace($email, $comp_uri, $body); + foreach ($addresses as $text => $email) { + $comp_uri = makeComposeLink('src/compose.php?send_to='.urlencode($email), $text); + $body = str_replace($text, $comp_uri, $body); } + /* Return number of unique addresses found */ return count($addresses); } @@ -79,14 +86,14 @@ $url_parser_url_tokens = array( 'news://'); global $url_parser_poss_ends; -$url_parser_poss_ends = array(' ', "\n", "\r", '<', '>', ".\r", ".\n", - '. ', ' ', ')', '(', '"', '<', '>', '.<', +$url_parser_poss_ends = array(' ', "\n", "\r", '<', '>', ".\r", ".\n", + '. ', ' ', ')', '(', '"', '<', '>', '.<', ']', '[', '{', '}', "\240", ', ', '. ', ",\n", ",\r"); /** * rfc 2368 (mailto URL) preg_match() regexp - * @see http://www.ietf.org/rfc/rfc2368.txt + * @link http://www.ietf.org/rfc/rfc2368.txt * @global string MailTo_PReg_Match the encapsulated regexp for preg_match() */ global $MailTo_PReg_Match; @@ -100,7 +107,7 @@ $MailTo_PReg_Match = '/((?:' . $Mailto_Email_RegExp . ')*)((?:\?(?:to|cc|bcc|sub * @return void */ function parseUrl (&$body) { - global $url_parser_poss_ends, $url_parser_url_tokens;; + global $url_parser_poss_ends, $url_parser_url_tokens; $start = 0; $blength = strlen($body); @@ -111,7 +118,7 @@ function parseUrl (&$body) { /* Find the first token to replace */ foreach ($url_parser_url_tokens as $the_token) { $pos = strpos(strtolower($body), $the_token, $start); - if (is_int($pos) && $pos < $blength) { + if (is_int($pos) && $pos < $target_pos) { $target_pos = $pos; $target_token = $the_token; } @@ -126,36 +133,37 @@ function parseUrl (&$body) { $target_pos = strlen($check_str) + $start; } - /* If there was a token to replace, replace it */ - if ($target_token == 'mailto:') { // rfc 2368 (mailto URL) - $target_pos += strlen($target_token); //skip mailto: + // rfc 2368 (mailto URL) + if ($target_token == 'mailto:') { + $target_pos += 7; //skip mailto: $end = $blength; $mailto = substr($body, $target_pos, $end-$target_pos); global $MailTo_PReg_Match; - if (preg_match($MailTo_PReg_Match, $mailto, $regs)) { + if ((preg_match($MailTo_PReg_Match, $mailto, $regs)) && ($regs[0] != '')) { //sm_print_r($regs); $mailto_before = $target_token . $regs[0]; $mailto_params = $regs[10]; - if ($regs[1]) { //if there is an email addr before '?', we need to merge it with the params + if ($regs[1]) { //if there is an email addr before '?', we need to merge it with the params $to = 'to=' . $regs[1]; - if (strpos($mailto_params, 'to=') > -1) //already a 'to=' + if (strpos($mailto_params, 'to=') > -1) //already a 'to=' $mailto_params = str_replace('to=', $to . '%2C%20', $mailto_params); else { - if ($mailto_params) //already some params, append to them - $mailto_params .= '&'. $to; + if ($mailto_params) //already some params, append to them + $mailto_params .= '&' . $to; else - $mailto_params .= '?'. $to; + $mailto_params .= '?' . $to; } } - $url_str = str_replace(array('to=', 'cc=', 'bcc='), array('send_to=', 'send_to_cc=', 'send_to_bcc='), $mailto_params); + $url_str = preg_replace(array('/to=/i', '/(? +} + +/** + * Parses a string and returns the first e-mail address found. + * + * @param string string the string to process + * @return string the first e-mail address found + */ +function getEmail($string) { + global $Email_RegExp_Match; + $addresses = array(); + + /* Find all the email addresses in the body */ + while (eregi($Email_RegExp_Match, $string, $regs)) { + $addresses[$regs[0]] = strtr($regs[0], array('&' => '&')); + $start = strpos($string, $regs[0]) + strlen($regs[0]); + $string = substr($string, $start); + } + + /* Return the first address, or an empty string if no address was found */ + $addresses = array_values($addresses); + return (array_key_exists(0, $addresses) ? $addresses[0] : ''); +} + +/** + * Finds first occurrence of 8bit data in the string + * + * Function finds first 8bit symbol or html entity that represents 8bit character. + * Search start is defined by $offset argument. Search ends at $maxlength position. + * If $maxlength is not defined or bigger than provided string, search ends when + * string ends. + * + * Check returned data type in order to avoid confusion between bool(false) + * (not found) and int(0) (first char in the string). + * @param string $haystack + * @param integer $offset + * @param integer $maxlength + * @return mixed integer with first 8bit character position or boolean false + * @since 1.5.2 + */ +function sq_strpos_8bit($haystack,$offset=0,$maxlength=false) { + $ret = false; + + if ($maxlength===false || strlen($haystack) < $maxlength) { + $maxlength=strlen($haystack); + } + + for($i=$offset;$i<$maxlength;$i++) { + /* rh7-8 compatibility. don't use full 8bit range in regexp */ + if (preg_match('/[\200-\237]|\240|[\241-\377]/',$haystack[$i])) { + /* we have 8bit char. stop here and return position */ + $ret = $i; + break; + } elseif ($haystack[$i]=='&') { + $substring = substr($haystack,$i); + /** + * 1. look for "&#(decimal number);" where decimal_number is bigger than 127 + * 2. look for "&x(hexadecimal number);", where hex number is bigger than x7f + * 3. look for any html character entity that is not 7bit html special char. Use + * own sq_get_html_translation_table() function with 'utf-8' character set in + * order to get all html entities. + */ + if ((preg_match('/^&#(\d+);/',$substring,$match) && $match[1]>127) || + (preg_match('/^&x([0-9a-f]+);/i',$substring,$match) && $match[1]>"\x7f") || + (preg_match('/^&([a-z]+);/i',$substring,$match) && + !in_array($match[0],get_html_translation_table(HTML_SPECIALCHARS)) && + in_array($match[0],sq_get_html_translation_table(HTML_ENTITIES,ENT_COMPAT,'utf-8')))) { + $ret = $i; + break; + } + } + } + return $ret; +}