$entry"; } } } function throttle($type, $rate) { if (!user_access("access administration pages")) { if ($throttle = db_fetch_object(db_query("SELECT * FROM {watchdog} WHERE type = '%s' AND hostname = '%s' AND %d - timestamp < %d", $type, $_SERVER['REMOTE_ADDR'], time(), $rate))) { watchdog("warning", "throttle: '". $_SERVER['REMOTE_ADDR'] ."' exceeded submission rate - $throttle->type"); die(message_throttle()); } } } function _fix_gpc_magic(&$item, $key) { if (is_array($item)) { array_walk($item, '_fix_gpc_magic'); } else { $item = stripslashes($item); } } function fix_gpc_magic() { static $fixed = false; if (!$fixed && ini_get("magic_quotes_gpc")) { array_walk($_GET, '_fix_gpc_magic'); array_walk($_POST, '_fix_gpc_magic'); array_walk($_COOKIE, '_fix_gpc_magic'); array_walk($_REQUEST, '_fix_gpc_magic'); $fixed = true; } } /** * @name Conversion * @ingroup common * * Converts data structures to a different type. * @{ */ function array2object($array) { if (is_array($array)) { foreach ($array as $key => $value) { $object->$key = $value; } } else { $object = $array; } return $object; } function object2array($object) { if (is_object($object)) { foreach ($object as $key => $value) { $array[$key] = $value; } } else { $array = $object; } return $array; } /* @} */ /** * @name Messages * @ingroup common * * Frequently used messages. * @{ */ function message_access() { return t("You are not authorized to access this page."); } function message_na() { return t("n/a"); } function message_throttle() { return t("You exceeded the maximum submission rate. Please wait a few minutes and try again."); } /* @} */ function locale_init() { global $languages, $user; if ($user->uid && $languages[$user->language]) { return $user->language; } else { return key($languages); } } /** * @ingroup common * * Translates strings to the current locale. * * We try to keep strings whole as much as possible and are unafraid of HTML * markup within translation strings if necessary. The suggested syntax for * a link embedded within a translation string is for example: * @code * $msg = t("You must login below or \create a new * account\ before viewing the next page.", array("%url" * => url("user/register"))); * @endcode * * @param $string A string containing the english string to translate. * @param $args Array of values to replace in the string. * @return Translated string. */ function t($string, $args = 0) { global $languages; $string = ($languages && module_exist("locale") ? locale($string) : $string); if (!$args) { return $string; } else { return strtr($string, $args); } } function drupal_specialchars($input, $quotes = ENT_NOQUOTES) { /* ** Note that we'd like to go 'htmlspecialchars($input, $quotes, "utf-8")' ** like the PHP manual tells us to, but we can't because there's a bug in ** PHP <4.3 that makes it mess up multibyte charsets if we specify the ** charset. Change this later once we make PHP 4.3 a requirement. */ return htmlspecialchars($input, $quotes); } /** * @name Validation * @ingroup common * * Functions to validate user input. */ /** * Verify the syntax of the given e-mail address. Empty e-mail addresses are * allowed. See RFC 2822 for details. * * @param $mail A string containing an email address. * @return */ function valid_email_address($mail) { $user = '[a-zA-Z0-9_\-\.\+\^!#\$%&*+\/\=\?\`\|\{\}~\']+'; $domain = '(?:[a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9\-]*[a-zA-Z0-9]\.?)+'; $ipv4 = '[0-9]{1,3}(\.[0-9]{1,3}){3}'; $ipv6 = '[0-9a-fA-F]{1,4}(\:[0-9a-fA-F]{1,4}){7}'; return preg_match("/^$user@($domain|(\[($ipv4|$ipv6)\]))$/", $mail); } /** * Verify the syntax of the given URL. * * @param $url an URL */ function valid_url($url) { return preg_match("/^[a-zA-z0-9\/:_\-_\.,]+$/", $url); } function valid_input_data($data) { if (is_array($data) || is_object($data)) { /* ** Form data can contain a number of nested arrays. */ foreach ($data as $key => $value) { if (!valid_input_data($value)) { return 0; } } } else { /* ** Detect evil input data. */ // check strings: $match = preg_match("/\Wjavascript\s*:/i", $data); $match += preg_match("/\Wexpression\s*\(/i", $data); $match += preg_match("/\Walert\s*\(/i", $data); // check attributes: $match += preg_match("/\W(dynsrc|datasrc|data|lowsrc|on[a-z]+)\s*=[^>]+?>/i", $data); // check tags: $match += preg_match("/<\s*(applet|script|object|style|embed|form|blink|meta|html|frame|iframe|layer|ilayer|head|frameset|xml)/i", $data); if ($match) { watchdog("warning", "terminated request because of suspicious input data: ". drupal_specialchars($data)); return 0; } } return 1; } /* @} */ /** * @defgroup search Search interface * @{ */ /** * Format a single result entry of a search query: * * @param $item a single search result as returned by module_search of * type array("count" => ..., "link" => ..., "title" => ..., "user" => ..., * "date" => ..., "keywords" => ...) * @param $type module type of this item */ function search_item($item, $type) { /* ** Modules may implement the "search_item" hook in order to overwrite ** the default function to display search results. */ if (module_hook($type, "search_item")) { $output = module_invoke($type, "search_item", $item); } else { $output = " ". $item["title"] ."
". t("Matching %names ranked in order of relevance:", array("%name" => $name)) ."
"; } else { $output .= "". t("Matching {$name}s") .":
"; } foreach ($result as $entry) { $output .= search_item($entry, $name); } } } } return $output; } /** * Display the search form and the resulting data. * * @param $type If set, search only nodes of this type. Otherwise, search all * types. * @param $action Form action. Defaults to 'site.com/search'. * @param $keys Query string. Defaults to global $keys. * @param $options != 0: Render additional form fields/text ("Restrict search * to", help text, etc). */ function search_type($type, $action = NULL, $keys = NULL, $options = NULL) { $_POST["edit"]["type"][$type] = "on"; return search_form($action, $keys, $options) . "