300 lines
9.3 KiB
PHP
300 lines
9.3 KiB
PHP
|
<?php
|
||
|
|
/**
|
||
|
|
* @package Joomla.Plugin
|
||
|
|
* @subpackage Content.emailcloak
|
||
|
|
*
|
||
|
|
* @copyright Copyright (C) 2005 - 2013 Open Source Matters, Inc. All rights reserved.
|
||
|
|
* @license GNU General Public License version 2 or later; see LICENSE.txt
|
||
|
|
*/
|
||
|
|
|
||
|
|
defined('_JEXEC') or die;
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Email cloack plugin class.
|
||
|
|
*
|
||
|
|
* @package Joomla.Plugin
|
||
|
|
* @subpackage Content.emailcloak
|
||
|
|
* @since 1.5
|
||
|
|
*/
|
||
|
|
class PlgContentEmailcloak extends JPlugin
|
||
|
|
{
|
||
|
|
/**
|
||
|
|
* Plugin that cloaks all emails in content from spambots via Javascript.
|
||
|
|
*
|
||
|
|
* @param string $context The context of the content being passed to the plugin.
|
||
|
|
* @param mixed &$row An object with a "text" property or the string to be cloaked.
|
||
|
|
* @param mixed &$params Additional parameters. See {@see PlgContentEmailcloak()}.
|
||
|
|
* @param integer $page Optional page number. Unused. Defaults to zero.
|
||
|
|
*
|
||
|
|
* @return boolean True on success.
|
||
|
|
*/
|
||
|
|
public function onContentPrepare($context, &$row, &$params, $page = 0)
|
||
|
|
{
|
||
|
|
// Don't run this plugin when the content is being indexed
|
||
|
|
if ($context == 'com_finder.indexer')
|
||
|
|
{
|
||
|
|
return true;
|
||
|
|
}
|
||
|
|
|
||
|
|
if (is_object($row))
|
||
|
|
{
|
||
|
|
return $this->_cloak($row->text, $params);
|
||
|
|
}
|
||
|
|
|
||
|
|
return $this->_cloak($row, $params);
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Generate a search pattern based on link and text.
|
||
|
|
*
|
||
|
|
* @param string $link The target of an email link.
|
||
|
|
* @param string $text The text enclosed by the link.
|
||
|
|
*
|
||
|
|
* @return string A regular expression that matches a link containing the parameters.
|
||
|
|
*/
|
||
|
|
protected function _getPattern ($link, $text)
|
||
|
|
{
|
||
|
|
$pattern = '~(?:<a ([\w "\'=\@\.\-:;]*)href\s*=\s*"mailto:'
|
||
|
|
. $link . '"([\w "\'=\@\.\-:;]*))>' . $text . '</a>~i';
|
||
|
|
|
||
|
|
return $pattern;
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Adds an attributes to the js cloaked email.
|
||
|
|
*
|
||
|
|
* @param string $jsEmail Js cloaked email.
|
||
|
|
* @param string $before Attributes before email.
|
||
|
|
* @param string $after Attributes after email.
|
||
|
|
*
|
||
|
|
* @return string Js cloaked email with attributes.
|
||
|
|
*/
|
||
|
|
protected function _addAttributesToEmail($jsEmail, $before, $after)
|
||
|
|
{
|
||
|
|
if ($before !== "")
|
||
|
|
{
|
||
|
|
$before = str_replace("'", "\'", $before);
|
||
|
|
$jsEmail = str_replace("document.write('<a '", "document.write('<a {$before}'", $jsEmail);
|
||
|
|
}
|
||
|
|
|
||
|
|
if ($after !== "")
|
||
|
|
{
|
||
|
|
$after = str_replace("'", "\'", $after);
|
||
|
|
$jsEmail = str_replace("'\'>');", "'\'{$after}>');", $jsEmail);
|
||
|
|
}
|
||
|
|
|
||
|
|
return $jsEmail;
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Cloak all emails in text from spambots via Javascript.
|
||
|
|
*
|
||
|
|
* @param string &$text The string to be cloaked.
|
||
|
|
* @param mixed &$params Additional parameters. Parameter "mode" (integer, default 1)
|
||
|
|
* replaces addresses with "mailto:" links if nonzero.
|
||
|
|
*
|
||
|
|
* @return boolean True on success.
|
||
|
|
*/
|
||
|
|
protected function _cloak(&$text, &$params)
|
||
|
|
{
|
||
|
|
/*
|
||
|
|
* Check for presence of {emailcloak=off} which is explicits disables this
|
||
|
|
* bot for the item.
|
||
|
|
*/
|
||
|
|
if (JString::strpos($text, '{emailcloak=off}') !== false)
|
||
|
|
{
|
||
|
|
$text = JString::str_ireplace('{emailcloak=off}', '', $text);
|
||
|
|
|
||
|
|
return true;
|
||
|
|
}
|
||
|
|
|
||
|
|
// Simple performance check to determine whether bot should process further.
|
||
|
|
if (JString::strpos($text, '@') === false)
|
||
|
|
{
|
||
|
|
return true;
|
||
|
|
}
|
||
|
|
|
||
|
|
$mode = $this->params->def('mode', 1);
|
||
|
|
|
||
|
|
// any@email.address.com
|
||
|
|
$searchEmail = '([\w\.\-]+\@(?:[a-z0-9\.\-]+\.)+(?:[a-zA-Z0-9\-]{2,10}))';
|
||
|
|
|
||
|
|
// any@email.address.com?subject=anyText
|
||
|
|
$searchEmailLink = $searchEmail . '([?&][\x20-\x7f][^"<>]+)';
|
||
|
|
|
||
|
|
// Any Text
|
||
|
|
$searchText = '([\x20-\x7f][^<>]+)';
|
||
|
|
|
||
|
|
// Any Image link
|
||
|
|
$searchImage = "(<img[^>]+>)";
|
||
|
|
|
||
|
|
/*
|
||
|
|
* Search and fix derivatives of link code <a href="http://mce_host/ourdirectory/email@amail.com"
|
||
|
|
* >email@email.com</a>. This happens when inserting an email in TinyMCE, cancelling its suggestion to add
|
||
|
|
* the mailto: prefix...
|
||
|
|
*/
|
||
|
|
$pattern = $this->_getPattern($searchEmail, $searchEmail);
|
||
|
|
$pattern = str_replace('"mailto:', '"http://mce_host([\x20-\x7f][^<>]+/)', $pattern);
|
||
|
|
|
||
|
|
while (preg_match($pattern, $text, $regs, PREG_OFFSET_CAPTURE))
|
||
|
|
{
|
||
|
|
$mail = $regs[3][0];
|
||
|
|
$mailText = $regs[5][0];
|
||
|
|
|
||
|
|
// Check to see if mail text is different from mail addy
|
||
|
|
$replacement = JHtml::_('email.cloak', $mail, $mode, $mailText);
|
||
|
|
|
||
|
|
// Ensure that attributes is not stripped out by email cloaking
|
||
|
|
$replacement = $this->_addAttributesToEmail($replacement, $regs[1][0], $regs[4][0]);
|
||
|
|
|
||
|
|
// Replace the found address with the js cloaked email
|
||
|
|
$text = substr_replace($text, $replacement, $regs[0][1], strlen($regs[0][0]));
|
||
|
|
}
|
||
|
|
|
||
|
|
/*
|
||
|
|
* Search and fix derivatives of link code <a href="http://mce_host/ourdirectory/email@amail.com"
|
||
|
|
* >anytext</a>. This happens when inserting an email in TinyMCE, cancelling its suggestion to add
|
||
|
|
* the mailto: prefix...
|
||
|
|
*/
|
||
|
|
$pattern = $this->_getPattern($searchEmail, $searchText);
|
||
|
|
$pattern = str_replace('"mailto:', '"http://mce_host([\x20-\x7f][^<>]+/)', $pattern);
|
||
|
|
|
||
|
|
while (preg_match($pattern, $text, $regs, PREG_OFFSET_CAPTURE))
|
||
|
|
{
|
||
|
|
$mail = $regs[3][0];
|
||
|
|
$mailText = $regs[5][0];
|
||
|
|
|
||
|
|
// Check to see if mail text is different from mail addy
|
||
|
|
$replacement = JHtml::_('email.cloak', $mail, $mode, $mailText, 0);
|
||
|
|
|
||
|
|
// Ensure that attributes is not stripped out by email cloaking
|
||
|
|
$replacement = $this->_addAttributesToEmail($replacement, $regs[1][0], $regs[4][0]);
|
||
|
|
|
||
|
|
// Replace the found address with the js cloaked email
|
||
|
|
$text = substr_replace($text, $replacement, $regs[0][1], strlen($regs[0][0]));
|
||
|
|
}
|
||
|
|
|
||
|
|
/*
|
||
|
|
* Search for derivatives of link code <a href="mailto:email@amail.com"
|
||
|
|
* >email@amail.com</a>
|
||
|
|
*/
|
||
|
|
$pattern = $this->_getPattern($searchEmail, $searchEmail);
|
||
|
|
|
||
|
|
while (preg_match($pattern, $text, $regs, PREG_OFFSET_CAPTURE))
|
||
|
|
{
|
||
|
|
$mail = $regs[2][0];
|
||
|
|
$mailText = $regs[4][0];
|
||
|
|
|
||
|
|
// Check to see if mail text is different from mail addy
|
||
|
|
$replacement = JHtml::_('email.cloak', $mail, $mode, $mailText);
|
||
|
|
|
||
|
|
// Ensure that attributes is not stripped out by email cloaking
|
||
|
|
$replacement = $this->_addAttributesToEmail($replacement, $regs[1][0], $regs[3][0]);
|
||
|
|
|
||
|
|
// Replace the found address with the js cloaked email
|
||
|
|
$text = substr_replace($text, $replacement, $regs[0][1], strlen($regs[0][0]));
|
||
|
|
}
|
||
|
|
|
||
|
|
/*
|
||
|
|
* Search for derivatives of link code <a href="mailto:email@amail.com">
|
||
|
|
* anytext</a>
|
||
|
|
*/
|
||
|
|
$pattern = $this->_getPattern($searchEmail, $searchText);
|
||
|
|
|
||
|
|
while (preg_match($pattern, $text, $regs, PREG_OFFSET_CAPTURE))
|
||
|
|
{
|
||
|
|
$mail = $regs[2][0];
|
||
|
|
$mailText = $regs[4][0];
|
||
|
|
|
||
|
|
$replacement = JHtml::_('email.cloak', $mail, $mode, $mailText, 0);
|
||
|
|
|
||
|
|
// Ensure that attributes is not stripped out by email cloaking
|
||
|
|
$replacement = $this->_addAttributesToEmail($replacement, $regs[1][0], $regs[3][0]);
|
||
|
|
|
||
|
|
// Replace the found address with the js cloaked email
|
||
|
|
$text = substr_replace($text, $replacement, $regs[0][1], strlen($regs[0][0]));
|
||
|
|
}
|
||
|
|
|
||
|
|
/*
|
||
|
|
* Search for derivatives of link code <a href="mailto:email@amail.com">
|
||
|
|
* <img anything></a>
|
||
|
|
*/
|
||
|
|
$pattern = $this->_getPattern($searchEmail, $searchImage);
|
||
|
|
|
||
|
|
while (preg_match($pattern, $text, $regs, PREG_OFFSET_CAPTURE))
|
||
|
|
{
|
||
|
|
$mail = $regs[2][0];
|
||
|
|
$mailText = $regs[4][0];
|
||
|
|
|
||
|
|
$replacement = JHtml::_('email.cloak', $mail, $mode, $mailText, 0);
|
||
|
|
|
||
|
|
// Ensure that attributes is not stripped out by email cloaking
|
||
|
|
$replacement = $this->_addAttributesToEmail($replacement, $regs[1][0], $regs[3][0]);
|
||
|
|
|
||
|
|
// Replace the found address with the js cloaked email
|
||
|
|
$text = substr_replace($text, $replacement, $regs[0][1], strlen($regs[0][0]));
|
||
|
|
}
|
||
|
|
|
||
|
|
/*
|
||
|
|
* Search for derivatives of link code <a href="mailto:email@amail.com?
|
||
|
|
* subject=Text">email@amail.com</a>
|
||
|
|
*/
|
||
|
|
$pattern = $this->_getPattern($searchEmailLink, $searchEmail);
|
||
|
|
|
||
|
|
while (preg_match($pattern, $text, $regs, PREG_OFFSET_CAPTURE))
|
||
|
|
{
|
||
|
|
$mail = $regs[2][0] . $regs[3][0];
|
||
|
|
$mailText = $regs[5][0];
|
||
|
|
|
||
|
|
// Needed for handling of Body parameter
|
||
|
|
$mail = str_replace('&', '&', $mail);
|
||
|
|
|
||
|
|
// Check to see if mail text is different from mail addy
|
||
|
|
$replacement = JHtml::_('email.cloak', $mail, $mode, $mailText);
|
||
|
|
|
||
|
|
// Ensure that attributes is not stripped out by email cloaking
|
||
|
|
$replacement = $this->_addAttributesToEmail($replacement, $regs[1][0], $regs[4][0]);
|
||
|
|
|
||
|
|
// Replace the found address with the js cloaked email
|
||
|
|
$text = substr_replace($text, $replacement, $regs[0][1], strlen($regs[0][0]));
|
||
|
|
}
|
||
|
|
|
||
|
|
/*
|
||
|
|
* Search for derivatives of link code <a href="mailto:email@amail.com?
|
||
|
|
* subject=Text">anytext</a>
|
||
|
|
*/
|
||
|
|
$pattern = $this->_getPattern($searchEmailLink, $searchText);
|
||
|
|
|
||
|
|
while (preg_match($pattern, $text, $regs, PREG_OFFSET_CAPTURE))
|
||
|
|
{
|
||
|
|
$mail = $regs[2][0] . $regs[3][0];
|
||
|
|
$mailText = $regs[5][0];
|
||
|
|
|
||
|
|
// Needed for handling of Body parameter
|
||
|
|
$mail = str_replace('&', '&', $mail);
|
||
|
|
|
||
|
|
$replacement = JHtml::_('email.cloak', $mail, $mode, $mailText, 0);
|
||
|
|
|
||
|
|
// Ensure that attributes is not stripped out by email cloaking
|
||
|
|
$replacement = $this->_addAttributesToEmail($replacement, $regs[1][0], $regs[4][0]);
|
||
|
|
|
||
|
|
// Replace the found address with the js cloaked email
|
||
|
|
$text = substr_replace($text, $replacement, $regs[0][1], strlen($regs[0][0]));
|
||
|
|
}
|
||
|
|
|
||
|
|
// Search for plain text email@amail.com
|
||
|
|
$pattern = '~' . $searchEmail . '([^a-z0-9]|$)~i';
|
||
|
|
|
||
|
|
while (preg_match($pattern, $text, $regs, PREG_OFFSET_CAPTURE))
|
||
|
|
{
|
||
|
|
$mail = $regs[1][0];
|
||
|
|
$replacement = JHtml::_('email.cloak', $mail, $mode);
|
||
|
|
|
||
|
|
// Replace the found address with the js cloaked email
|
||
|
|
$text = substr_replace($text, $replacement, $regs[1][1], strlen($mail));
|
||
|
|
}
|
||
|
|
|
||
|
|
return true;
|
||
|
|
}
|
||
|
|
}
|