106 lines
2.3 KiB
PHP
106 lines
2.3 KiB
PHP
|
<?php
|
||
|
|
|
||
|
|
/**
|
||
|
|
*
|
||
|
|
* Embeds the results of a PHP script at render-time.
|
||
|
|
*
|
||
|
|
* @category Text
|
||
|
|
*
|
||
|
|
* @package Text_Wiki
|
||
|
|
*
|
||
|
|
* @author Paul M. Jones <pmjones@php.net>
|
||
|
|
*
|
||
|
|
* @license LGPL
|
||
|
|
*
|
||
|
|
* @version $Id: Embed.php,v 1.3 2005/02/23 17:38:29 pmjones Exp $
|
||
|
|
*
|
||
|
|
*/
|
||
|
|
|
||
|
|
/**
|
||
|
|
*
|
||
|
|
* Embeds the results of a PHP script at render-time.
|
||
|
|
*
|
||
|
|
* This class implements a Text_Wiki_Parse to embed the contents of a URL
|
||
|
|
* inside the page at render-time. Typically used to get script output.
|
||
|
|
* This differs from the 'include' rule, which incorporates results at
|
||
|
|
* parse-time; 'embed' output does not get parsed by Text_Wiki, while
|
||
|
|
* 'include' ouput does.
|
||
|
|
*
|
||
|
|
* This rule is inherently not secure; it allows cross-site scripting to
|
||
|
|
* occur if the embedded output has <script> or other similar tags. Be
|
||
|
|
* careful.
|
||
|
|
*
|
||
|
|
* @category Text
|
||
|
|
*
|
||
|
|
* @package Text_Wiki
|
||
|
|
*
|
||
|
|
* @author Paul M. Jones <pmjones@php.net>
|
||
|
|
*
|
||
|
|
*/
|
||
|
|
|
||
|
|
class Text_Wiki_Parse_Embed extends Text_Wiki_Parse {
|
||
|
|
|
||
|
|
var $conf = array(
|
||
|
|
'base' => '/path/to/scripts/'
|
||
|
|
);
|
||
|
|
|
||
|
|
var $file = null;
|
||
|
|
|
||
|
|
var $output = null;
|
||
|
|
|
||
|
|
var $vars = null;
|
||
|
|
|
||
|
|
|
||
|
|
/**
|
||
|
|
*
|
||
|
|
* The regular expression used to find source text matching this
|
||
|
|
* rule.
|
||
|
|
*
|
||
|
|
* @access public
|
||
|
|
*
|
||
|
|
* @var string
|
||
|
|
*
|
||
|
|
*/
|
||
|
|
|
||
|
|
var $regex = '/(\[\[embed )(.+?)( .+?)?(\]\])/i';
|
||
|
|
|
||
|
|
|
||
|
|
/**
|
||
|
|
*
|
||
|
|
* Generates a token entry for the matched text. Token options are:
|
||
|
|
*
|
||
|
|
* 'text' => The full matched text, not including the <code></code> tags.
|
||
|
|
*
|
||
|
|
* @access public
|
||
|
|
*
|
||
|
|
* @param array &$matches The array of matches from parse().
|
||
|
|
*
|
||
|
|
* @return A delimited token number to be used as a placeholder in
|
||
|
|
* the source text.
|
||
|
|
*
|
||
|
|
*/
|
||
|
|
|
||
|
|
function process(&$matches)
|
||
|
|
{
|
||
|
|
// save the file location
|
||
|
|
$this->file = $this->getConf('base', './') . $matches[2];
|
||
|
|
|
||
|
|
// extract attribs as variables in the local space
|
||
|
|
$this->vars = $this->getAttrs($matches[3]);
|
||
|
|
unset($this->vars['this']);
|
||
|
|
extract($this->vars);
|
||
|
|
|
||
|
|
// run the script
|
||
|
|
ob_start();
|
||
|
|
include($this->file);
|
||
|
|
$this->output = ob_get_contents();
|
||
|
|
ob_end_clean();
|
||
|
|
|
||
|
|
// done, place the script output directly in the source
|
||
|
|
return $this->wiki->addToken(
|
||
|
|
$this->rule,
|
||
|
|
array('text' => $this->output)
|
||
|
|
);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
?>
|