TYPO3 Core

* @return string Input string with potential XSS code removed

*/

public static function removeXSS($string) {

$string = RemoveXSS::process($string);

return $string;

}

$returnCode='';

if ($gfxConf['gif_compress'] && strtolower(substr($theFile,-4,4))=='.gif') { // GIF...

if (($type=='IM' || !$type) && $gfxConf['im'] && $gfxConf['im_path_lzw']) { // IM

exec($cmd);

$returnCode='IM';

&& $GLOBALS['TYPO3_CONF_VARS']['GFX']['im_path_lzw']

&& strtolower(substr($theFile,-4,4))=='.png'

&& @is_file($theFile)) { // IM

exec($cmd);

$theFile = $newFile;

// unlink old file?? May be bad idea bacause TYPO3 would then recreate the file every time as TYPO3 thinks the file is not generated because it's missing!! So do not unlink $theFile here!!

) {

return $theFile;

} else {

exec($cmd);

if (@is_file($newFile)) return $newFile;

}

if ($chars >= 4) {

if(strlen($string)>$chars) {

return $origChars < 0 ?

}

}

return $string;

$theLine = strrev($parts[1]);

} else {

$afterParts = explode(' ',substr($str,$l+$p),2);

}

if (!strlen($theLine)) {break; } // Error, because this would keep us in an endless loop.

} else {

* @return boolean true if $item is in $list

*/

public static function inList($list, $item) {

}

/**

*/

public static function int_from_ver($verNumberStr) {

$verParts = explode('.',$verNumberStr);

}

/**

$nR = self::intInRange(hexdec(substr($color,1,2))+$R,0,255);

$nG = self::intInRange(hexdec(substr($color,3,2))+$G,0,255);

$nB = self::intInRange(hexdec(substr($color,5,2))+$B,0,255);

}

/**

if ($sizeInBytes>900) {

if ($sizeInBytes>900000000) { // GB

$val = $sizeInBytes/(1024*1024*1024);

}

elseif ($sizeInBytes>900000) { // MB

$val = $sizeInBytes/(1024*1024);

} else { // KB

$val = $sizeInBytes/(1024);

}

} else { // Bytes

}

}

*/

public static function calcPriority($string) {

$string=preg_replace('/[[:space:]]*/','',$string); // removing all whitespace

$qm='\*\/\+-^%';

// split the expression here:

$reg = array();

reset($reg[2]);

$number=0;

}

}

$number = $Msign=='-' ? $number-=$buffer : $number+=$buffer;

}

/**

$valueLenC=strcspn($string,')');

if ($valueLenC==strlen($string) || $valueLenC < $valueLenO) {

$value = self::calcPriority(substr($string,0,$valueLenC));

return $string;

} else {

}

// Security:

$securC--;

*/

public static function slashJS($string,$extended=0,$char="'") {

if ($extended) {$string = str_replace ("\\", "\\\\", $string);}

}

/**

* @return string Formatted for <textarea>-tags

*/

public static function formatForTextarea($content) {

}

/**

*/

public static function implodeArrayForUrl($name, array $theArray, $str = '', $skipBlank = false, $rawurlencodeParamName = false) {

foreach($theArray as $Akey => $AVal) {

if (is_array($AVal)) {

$str = self::implodeArrayForUrl($thisKeyName,$AVal,$str,$skipBlank,$rawurlencodeParamName);

} else {

if (!$skipBlank || strcmp($AVal,'')) {

}

}

}

reset($row);

$out=array();

foreach ($row as $value) {

}

return $str;

}

// There are '' around the value. We look for the next ' ' or '>'

$reg = preg_split('/[[:space:]=]/', $tag_tmp, 2);

$value[] = trim($reg[0]);

}

}

reset($value);

}

$list = array();

foreach($arr as $p => $v) {

}

return implode(' ',$list);

}

if(preg_match('/^(\t+)/',$string,$match)) {

$string = str_replace($match[1],"\t", $string);

}

/*<![CDATA[*/

/*]]>*/

}

return trim($string);

}

xml_parser_set_option($parser, XML_OPTION_SKIP_WHITE, 0);

xml_parse_into_struct($parser, $string, $vals, $index);

xml_parser_free($parser);

$stack = array( array() );

}

// Return XML:

self::array2xml($array,'',0,$docTag,0, $options);

}

*/

public static function array2xml(array $array,$NSprefix='',$level=0,$docTag='phparray',$spaceInd=0,array $options=array(),array $stackData=array()) {

// The list of byte values which will trigger binary-safe storage. If any value has one of these char values in it, it will be encoded in base64

// Set indenting mode:

$indentChar = $spaceInd ? ' ' : chr(9);

$indentN = $spaceInd>0 ? $spaceInd : 1;

$tagName = $k;

// Construct the tag name.

} elseif(isset($options['parentTagMap'][$stackData['parentTagName']])) { // Use tag based on parent tag name:

$tagName = (string)$options['parentTagMap'][$stackData['parentTagName']];

} elseif (!strcmp(intval($tagName),$tagName)) { // If integer...;

if ($options['useNindex']) { // If numeric key, prefix "n"

} else { // Use special tag for num. keys:

$tagName = $options['useIndexTagForNum'] ? $options['useIndexTagForNum'] : 'numIndex';

}

} elseif($options['useIndexTagForAssoc']) { // Use tag for all associative keys:

$tagName = $options['useIndexTagForAssoc'];

}

if (is_array($v)) {

// Sub elements:

$clearStackPath = $subOptions['clearStackPath'];

} else {

$subOptions = $options;

array(

'parentTagName' => $tagName,

'grandParentTagName' => $stackData['parentTagName'],

)

($spaceInd >= 0 ? str_pad('',($level+1)*$indentN,$indentChar) : '');

if ((int)$options['disableTypeAttrib']!=2) { // Do not set "type = array". Makes prettier XML but means that empty arrays are not restored with xml2array

$attr.=' type="array"';

$vLen = strlen($v); // check for length, because PHP 5.2.0 may crash when first argument of strcspn is empty

if ($vLen && strcspn($v,$binaryChars) != $vLen) { // Go for base64 encoding if the initial segment NOT matching any binary char has the same length as the whole string!

// If the value contained binary chars then we base64-encode it an set an attribute to notify this situation:

$attr.=' base64="1"';

} else {

// Otherwise, just htmlspecialchar the stuff:

$content = '<![CDATA[' . $v . ']]>';

}

} elseif (!$options['disableTypeAttrib']) {

}

}

}

// Add the element to the output string:

}

// If we are at the outer-most level, then we finally wrap it all in the document tags and return that as the value:

if (!$level) {

$output =

}

return $output;

// If error, return error message:

if (xml_get_error_code($parser)) {

}

xml_parser_free($parser);

// open tag:

if ($type=='open' || $type=='complete') {

if(isset($val['attributes'])) {

foreach($val['attributes'] as $k => $v) {

}

}

if ($type=='complete') {

if(isset($val['value'])) {

} else $XMLcontent.='/>';

} else $XMLcontent.='>';

}

// finish tag:

if ($type=='close') {

}

// cdata

if($type=='cdata') {

}

$errno = 0;

// $errstr = '';

if (!$fp || $errno > 0) {

if (isset($report)) {

$report['error'] = $errno ? $errno : -1;

* Writes $content to a filename in the typo3temp/ folder (and possibly one or two subfolders...)

* Accepts an additional subdirectory in the file path!

*

* @param string Content string to write

* @return string Returns false on success, otherwise an error string telling about the problem.

*/

// Check parts:

if (self::validPathStr($filepath) && $fI['basename'] && strlen($fI['basename'])<60) {

if (defined('PATH_site')) {

if (@is_dir($dirName)) {

if (self::isFirstPartOfStr($fI['dirname'],$dirName)) {

if (preg_match('/^[[:alnum:]_]+\/$/',$subdir) || preg_match('/^[[:alnum:]_]+\/[[:alnum:]_]+\/$/',$subdir)) {

$dirName.= $subdir;

if (!@is_dir($dirName)) {

}

}

// Checking dir-name again (sub-dir might have been created):

if (@is_dir($dirName)) {

self::writeFile($filepath, $content);

if (!@is_file($filepath)) return 'File not written to disk! Write permission error in filesystem?';

} else return 'Calculated filelocation didn\'t match input $filepath!';

} else return 'PATH_site + "typo3temp/" was not a directory!';

} else return 'PATH_site constant was NOT defined!';

}

/**

$allParts = self::trimExplode('/',$deepDir,1);

$root = '';

foreach($allParts as $part) {

}

}

}

if ($removeNonEmpty==true && $handle = opendir($path)) {

while ($OK && false !== ($file = readdir($handle))) {

if ($file=='.' || $file=='..') continue;

}

closedir($handle);

}

$d = dir($path);

if (is_object($d)) {

while($entry=$d->read()) {

$fI = pathinfo($entry);

elseif ($order) {$sortarray[$key]=$entry;}

}

}

}

$d->close();

}

// Sort them:

$dirs = self::get_dirs($path);

if (is_array($dirs) && $recursivityLevels>0) {

foreach ($dirs as $subdirs) {

}

}

}

public static function locationHeaderUrl($path) {

$uI = parse_url($path);

if (substr($path,0,1)=='/') { // relative to HOST

} elseif (!$uI['scheme']) { // No scheme either

}

return $path;

}

public static function debug_ordvalue($string,$characters=100) {

if(strlen($string) < $characters) $characters = strlen($string);

for ($i=0; $i<$characters; $i++) {

}

return trim($valuestring);

}

} else {

foreach ($array_in as $key => $val) {

$result.= '<tr>

<td>';

if (is_array($val)) {

$result.=self::view_array($val);

} elseif (is_object($val)) {

$string = get_class($val);

if (method_exists($val, '__toString')) {

}

} else {

if (gettype($val) == 'object') {

$string = 'Unknown object';

} else {

$string = (string)$val;

}

}

$result.= '</td>

</tr>';

} else {

$result = '<table border="1" cellpadding="1" cellspacing="0" bgcolor="white">

<tr>

</tr>

</table>'; // Output it as a string.

}

}

if ($brOrHeader && !self::testInt($brOrHeader)) {

} elseif ($brOrHeader<0) {

for($a=0;$a<abs(intval($brOrHeader));$a++){echo '<br />';}

}

print_r($var);

echo '</pre>|</b>';

} elseif ((string)$var!='') {

} else {

echo '<b>| debug |</b>';

}

$path = array();

foreach($trail as $dat) {

}

return implode(' // ',$path);

$tRows = array();

// Header:

$tCells = array();

foreach($headerColumns as $key) {

$tCells[] = '

}

$tRows[] = '

</tr>';

// Rows:

$tCells = array();

foreach($headerColumns as $key) {

$tCells[] = '

}

$tRows[] = '

</tr>';

}

$table = '

</table>';

if ($returnHTML) return $table; else echo $table;

} else debug('Empty array of rows',$header);

*/

public static function getThisUrl() {

$p=parse_url(self::getIndpEnv('TYPO3_REQUEST_SCRIPT')); // Url of this script

return $url;

}

$uP = explode('?',$url);

$params = self::implodeArrayForUrl('',$getP);

return $outurl;

}

// add a prefix if TYPO3 is behind a proxy: ext-domain.com => int-server.com/prefix

if (self::cmpIP($_SERVER['REMOTE_ADDR'], $GLOBALS['TYPO3_CONF_VARS']['SYS']['reverseProxyIP'])) {

if (self::getIndpEnv('TYPO3_SSL') && $GLOBALS['TYPO3_CONF_VARS']['SYS']['reverseProxyPrefixSSL']) {

} elseif ($GLOBALS['TYPO3_CONF_VARS']['SYS']['reverseProxyPrefix']) {

}

}

break;

$retVal = str_replace('//','/', str_replace('\\','/', (PHP_SAPI=='cgi'||PHP_SAPI=='isapi' ||PHP_SAPI=='cgi-fcgi')&&($_SERVER['ORIG_PATH_TRANSLATED']?$_SERVER['ORIG_PATH_TRANSLATED']:$_SERVER['PATH_TRANSLATED'])? ($_SERVER['ORIG_PATH_TRANSLATED']?$_SERVER['ORIG_PATH_TRANSLATED']:$_SERVER['PATH_TRANSLATED']):($_SERVER['ORIG_SCRIPT_FILENAME']?$_SERVER['ORIG_SCRIPT_FILENAME']:$_SERVER['SCRIPT_FILENAME'])));

break;

case 'REQUEST_URI':

if ($GLOBALS['TYPO3_CONF_VARS']['SYS']['requestURIvar']) { // This is for URL rewriters that store the original URI in a server variable (eg ISAPI_Rewriter for IIS: HTTP_X_REWRITE_URL)

list($v,$n) = explode('|',$GLOBALS['TYPO3_CONF_VARS']['SYS']['requestURIvar']);

$retVal = $GLOBALS[$v][$n];

} elseif (!$_SERVER['REQUEST_URI']) { // This is for ISS/CGI which does not have the REQUEST_URI available.

} else {

$retVal = $_SERVER['REQUEST_URI'];

}

// add a prefix if TYPO3 is behind a proxy: ext-domain.com => int-server.com/prefix

if (self::cmpIP($_SERVER['REMOTE_ADDR'], $GLOBALS['TYPO3_CONF_VARS']['SYS']['reverseProxyIP'])) {

if (self::getIndpEnv('TYPO3_SSL') && $GLOBALS['TYPO3_CONF_VARS']['SYS']['reverseProxyPrefixSSL']) {

} elseif ($GLOBALS['TYPO3_CONF_VARS']['SYS']['reverseProxyPrefix']) {

}

}

break;

$retVal = $p[1];

break;

case 'TYPO3_REQUEST_HOST':

self::getIndpEnv('HTTP_HOST');

break;

case 'TYPO3_REQUEST_URL':

break;

case 'TYPO3_REQUEST_SCRIPT':

break;

case 'TYPO3_REQUEST_DIR':

break;

case 'TYPO3_SITE_URL':

if (defined('PATH_thisScript') && defined('PATH_site')) {

$url = self::getIndpEnv('TYPO3_REQUEST_DIR');

$siteUrl = substr($url,0,-strlen($lPath));

if (substr($siteUrl,-1)!='/') $siteUrl.='/';

list($extKey,$local) = explode('/',substr($filename,4),2);

$filename='';

if (strcmp($extKey,'') && t3lib_extMgm::isLoaded($extKey) && strcmp($local,'')) {

}

} elseif (!self::isAbsPath($filename)) { // relative. Prepended with $relPathPrefix

} elseif ($onlyRelative && !self::isFirstPartOfStr($filename,$relPathPrefix)) { // absolute, but set to blank if not allowed

$filename='';

}

*/

public static function verifyFilenameAgainstDenyPattern($filename) {

if (strcmp($filename,'') && strcmp($GLOBALS['TYPO3_CONF_VARS']['BE']['fileDenyPattern'],'')) {

if ($result) return false; // so if a matching filename is found, return false;

}

return true;

}

/**

* Use this function to move uploaded files to where you can work on them.

* Usage: 6

*

* @param string The temporary uploaded filename, eg. $_FILES['[upload field name here]']['tmp_name']

}

/**

* Use this after upload_to_tempfile() or tempnam() from this class!

* Usage: 9

*

* @return boolean Returns true if the file was unlink()'ed

* @see upload_to_tempfile(), tempnam()

*/

public static function unlink_tempfile($uploadedTempFileName) {

if (unlink($uploadedTempFileName)) return TRUE;

}

}

* Usage: 7

*

* @param string Prefix to temp file (which will have no extension btw)

* @see unlink_tempfile(), upload_to_tempfile()

*/

public static function tempnam($filePrefix) {

}

/**

$preKey = $uid_or_record;

}

$authCode = substr(md5($authCode),0,$codeLength);

return $authCode;

}

if ($file) {

$baseFile = preg_replace('/\.(php|xml)$/', '', $file);

if ($GLOBALS['TYPO3_CONF_VARS']['BE']['forceCharset'] || $charset) {

} else {

if (is_array($LOCAL_LANG)) {

$LOCAL_LANG = array('default'=>$LOCAL_LANG['default'], $langKey=>$LOCAL_LANG[$langKey]); }

}

} else {

if ($errorMode == 2) {

throw new t3lib_exception($errorMsg);

} elseif(!$errorMode) {

}

// Cache file name:

// Check if cache file exists...

if (!@is_file($cacheFileName)) { // ... if it doesn't, create content and write it:

// Cache the content now:

$serContent = array('origFile'=>$hashSource, 'LOCAL_LANG'=>array('default'=>$LOCAL_LANG['default'], $langKey=>$LOCAL_LANG[$langKey]));

$res = self::writeFileToTypo3tempDir($cacheFileName, serialize($serContent));

} else {

// Get content from cache:

$serContent = unserialize(self::getUrl($cacheFileName));

}

// Cache file name:

// Check if cache file exists...

if (!@is_file($cacheFileName)) { // ... if it doesn't, create content and write it:

// Cache the content now:

$serContent = array('origFile'=>$hashSource, 'LOCAL_LANG'=>array('default'=>$LOCAL_LANG['default'], $langKey=>$LOCAL_LANG[$langKey]));

$res = self::writeFileToTypo3tempDir($cacheFileName, serialize($serContent));

} else {

// Get content from cache:

$serContent = unserialize(self::getUrl($cacheFileName));

if ($localized_file && @is_file($localized_file)) {

// Cache file name:

// Check if cache file exists...

if (!@is_file($cacheFileName)) { // ... if it doesn't, create content and write it:

$serContent = array('extlang'=>$langKey, 'origFile'=>$hashSource, 'EXT_DATA'=>$LOCAL_LANG[$langKey]);

$res = self::writeFileToTypo3tempDir($cacheFileName, serialize($serContent));

if ($res) {

}

} else {

// Get content from cache:

*/

public static function llXmlAutoFileName($fileRef,$language) {

// Analyse file reference:

} else {

$validatedPrefix = '';

}

list($file_extPath,$file_fileName) = $temp;

// The filename is prefixed with "[language key]." because it prevents the llxmltranslate tool from detecting it.

} else {

return NULL;

}

$dcf = $tca['ctrl']['dynamicConfigFile'];

if ($dcf) {

if (!strcmp(substr($dcf,0,6),'T3LIB:')) {

} elseif (self::isAbsPath($dcf) && @is_file($dcf)) { // Absolute path...

include($dcf);

}

}

}

array(&$params, &$ref)

);

} else {

if ($errorMode == 2) {

throw new Exception($errorMsg);

} elseif(!$errorMode) {

}

}

} else {

if ($errorMode == 2) {

throw new Exception($errorMsg);

} elseif(!$errorMode) {

if (function_exists($funcRef)) {

$content = call_user_func_array($funcRef, array(&$params, &$ref));

} else {

if ($errorMode == 2) {

throw new Exception($errorMsg);

} elseif(!$errorMode) {

!self::isFirstPartOfStr(trim($class),$checkPrefix) &&

!self::isFirstPartOfStr(trim($class),'tx_')

) {

return FALSE;

}

return $classObj;

} else {

}

}

}

public static function makeInstanceClassName($className) {

self::logDeprecatedFunction();

}

/**

if (is_object($obj)) {

if(!@is_callable(array($obj,'init'))) {

// use silent logging??? I don't think so.

}

$obj->info = $info;

if ($obj->init()) { // service available?

switch ((string)$encoding) {

case 'base64':

'Content-Transfer-Encoding: base64';

break;

case '8bit':

'Content-Transfer-Encoding: 8bit';

break;

case 'quoted-printable':

default:

'Content-Transfer-Encoding: quoted-printable';

$message=self::quoted_printable($message);

$ret = @mail($email, $subject, $message, $headers);

if (!$ret) {

}

return $ret;

}

*/

public static function quoted_printable($string,$maxlen=76) {

// Make sure the string contains only Unix linebreaks

$string = str_replace(chr(13), chr(10), $string); // Replace Mac breaks (\r)

$linebreak = chr(10); // Default line break for Unix systems.

if (TYPO3_OS=='WIN') {

}

$newString = '';

$char = substr($val,$index,1);

$ordVal = ord($char);

if ($len>($maxlen-4) || ($len>($maxlen-14) && $ordVal==32)) {

$len=0; // Reset the length counter

}

if (($ordVal>=33 && $ordVal<=60) || ($ordVal>=62 && $ordVal<=126) || $ordVal==9 || $ordVal==32) {

$len+=3;

}

}

}

}

/**

return $line;

}

// Check if any non-ASCII characters are found - otherwise encoding is not needed

return $line;

}

// Wrap email addresses in a special marker

$oldPart = $part;

switch ((string)$enc) {

case 'base64':

break;

case 'quoted-printable':

default:

$search = array(' ', '?');

$replace = array('_', '=3F');

$qpValue = str_replace($search, $replace, $qpValue);

}

break;

}

public static function substUrlsInPlainText($message,$urlmode='76',$index_script_url='') {

// Substitute URLs with shorter links:

foreach (array('http','https') as $protocol) {

foreach ($urlSplit as $c => &$v) {

if ($c) {

$newParts = preg_split('/\s|[<>"{}|\\\^`()\']/', $v, 2);

switch ((string)$urlmode) {

case 'all':

*

* @param string Input URL

* @param integer URL string length limit

* @return string Processed URL

*/

public static function makeRedirectUrl($inUrl,$l=0,$index_script_url='') {

$GLOBALS['TYPO3_DB']->exec_INSERTquery('cache_md5params', $insertFields);

}

}

return $inUrl;

// for CLI logging name is <fqdn-hostname>:<TYPO3-path>

if (defined('TYPO3_cliMode') && TYPO3_cliMode) {

}

// for Web logging name is <protocol>://<request-hostame>/<site-path>

else {

if (TYPO3_OS == 'WIN') {

$facility = LOG_USER;

} else {

}

openlog($TYPO3_CONF_VARS['SC_OPTIONS']['t3lib/class.t3lib_div.php']['systemLogHost'], LOG_ODELAY, $facility);

}

// is message worth logging for this log type?

if (intval($level) > $severity) continue;

// write message to a file

if ($type == 'file') {

$file = fopen($destination, 'a');

if ($file) {

flock($file, LOCK_EX); // try locking, but ignore if not available (eg. on NFS and FAT)

flock($file, LOCK_UN); // release the lock

fclose($file);

}

elseif ($type == 'mail') {

list($to,$from) = explode('/',$destination);

mail($to, 'Warning - error in TYPO3 installation',

);

}

// use the PHP error log

elseif ($type == 'error_log') {

}

// use the system log

elseif ($type == 'syslog') {

if ($file) {

$date = date($GLOBALS['TYPO3_CONF_VARS']['SYS']['ddmmyy'] . ' ' . $GLOBALS['TYPO3_CONF_VARS']['SYS']['hhmm'] . ': ');

flock($file, LOCK_EX); // try locking, but ignore if not available (eg. on NFS and FAT)

flock($file, LOCK_UN); // release the lock

@fclose($file);

}

if ($trail[1]['class']) {

$errorMsg .= ' of class ' . $trail[1]['class'];

}

// michael@typo3.org: Temporary disabled until error handling is implemented (follows later this week...)

/*

// write a longer message to the deprecation log: <function> <annotion> - <trace> (<source>)

$logMsg = $trail[1]['class'] . $trail[1]['type'] . $trail[1]['function'];

$logMsg .= ' (' . substr($function->getFileName(), strlen(PATH_site)) . '#' . $function->getStartLine() . ')';

self::deprecationLog($logMsg);

}

$valListCnt = count($valueList);

foreach ($arr as $key => $value) {

if (!$valListCnt || in_array($key, $valueList)) {

}

}

return $str;

// Compile the path & command

if($im_version==='gm') {

$switchCompositeParameters=true;

} else {

if($im_version==='im6') { $switchCompositeParameters=true; }

}

// strip profile information for thumbnails and reduce their size

}

}

if($command=='composite' && $switchCompositeParameters) { // Because of some weird incompatibilities between ImageMagick 4 and 6 (plus GraphicsMagick), it is needed to change the parameters order under some preconditions

$paramsArr = self::unQuoteFilenames($parameters);

$paramsArr[count($paramsArr)-4] = $tmp;

}

}

return $cmdLine;

$quoteActive = -1; // Whenever a quote character (") is found, $quoteActive is set to the element number inside of $params. A value of -1 means that there are not open quotes at the current position.

foreach ($paramsArr as $k => $v) {

if($quoteActive > -1) {

unset($paramsArr[$k]);

if(preg_match('/"$/', $v)) { $quoteActive = -1; }