includes/wikiengine/Parse/Default/Include.php
changeset 1027 98c052fc3337
parent 1026 f0431eb8161e
child 1028 dde4416dea00
equal deleted inserted replaced
1026:f0431eb8161e 1027:98c052fc3337
     1 <?php
       
     2 
       
     3 /**
       
     4 * 
       
     5 * Includes the contents of another PHP script into the source text.
       
     6 * 
       
     7 * @category Text
       
     8 * 
       
     9 * @package Text_Wiki
       
    10 * 
       
    11 * @author Paul M. Jones <pmjones@php.net>
       
    12 * 
       
    13 * @license LGPL
       
    14 * 
       
    15 * @version $Id: Include.php,v 1.3 2005/02/23 17:38:29 pmjones Exp $
       
    16 * 
       
    17 */
       
    18 
       
    19 /**
       
    20 * 
       
    21 * This class implements a Text_Wiki_Parse to include the results of a
       
    22 * script directly into the source at parse-time; thus, the output of the
       
    23 * script will be parsed by Text_Wiki.  This differs from the 'embed'
       
    24 * rule, which incorporates the results at render-time, meaning that the
       
    25 * 'embed' content is not parsed by Text_Wiki.
       
    26 *
       
    27 * DANGER!
       
    28 * 
       
    29 * This rule is inherently not secure; it allows cross-site scripting to
       
    30 * occur if the embedded output has <script> or other similar tags.  Be
       
    31 * careful.
       
    32 *
       
    33 * @category Text
       
    34 * 
       
    35 * @package Text_Wiki
       
    36 * 
       
    37 * @author Paul M. Jones <pmjones@php.net>
       
    38 * 
       
    39 */
       
    40 
       
    41 class Text_Wiki_Parse_Include extends Text_Wiki_Parse {
       
    42     
       
    43     var $conf = array(
       
    44         'base' => '/path/to/scripts/'
       
    45     );
       
    46     
       
    47     var $file = null;
       
    48     
       
    49     var $output = null;
       
    50     
       
    51     var $vars = null;
       
    52 
       
    53     /**
       
    54     * 
       
    55     * The regular expression used to find source text matching this
       
    56     * rule.
       
    57     * 
       
    58     * @access public
       
    59     * 
       
    60     * @var string
       
    61     * 
       
    62     */
       
    63     
       
    64     var $regex = '/(\[\[include )(.+?)( .+?)?(\]\])/i';
       
    65     
       
    66     
       
    67     /**
       
    68     * 
       
    69     * Includes the results of the script directly into the source; the output
       
    70     * will subsequently be parsed by the remaining Text_Wiki rules.
       
    71     * 
       
    72     * @access public
       
    73     *
       
    74     * @param array &$matches The array of matches from parse().
       
    75     *
       
    76     * @return The results of the included script.
       
    77     *
       
    78     */
       
    79     
       
    80     function process(&$matches)
       
    81     {
       
    82         // save the file location
       
    83         $this->file = $this->getConf('base', './') . $matches[2];
       
    84 
       
    85         // extract attribs as variables in the local space
       
    86         $this->vars = $this->getAttrs($matches[3]);
       
    87         unset($this->vars['this']);
       
    88         extract($this->vars);
       
    89 
       
    90         // run the script
       
    91         ob_start();
       
    92         include($this->file);
       
    93         $this->output = ob_get_contents();
       
    94         ob_end_clean();
       
    95     
       
    96         // done, place the script output directly in the source
       
    97         return $this->output;
       
    98     }
       
    99 }
       
   100 ?>