author | Dan |
Sat, 08 Nov 2008 22:32:43 -0500 | |
changeset 720 | e2762777b170 |
parent 1 | fe660c52c48f |
permissions | -rw-r--r-- |
<?php /** * * Includes the contents of another PHP script into the source text. * * @category Text * * @package Text_Wiki * * @author Paul M. Jones <pmjones@php.net> * * @license LGPL * * @version $Id: Include.php,v 1.3 2005/02/23 17:38:29 pmjones Exp $ * */ /** * * This class implements a Text_Wiki_Parse to include the results of a * script directly into the source at parse-time; thus, the output of the * script will be parsed by Text_Wiki. This differs from the 'embed' * rule, which incorporates the results at render-time, meaning that the * 'embed' content is not parsed by Text_Wiki. * * DANGER! * * This rule is inherently not secure; it allows cross-site scripting to * occur if the embedded output has <script> or other similar tags. Be * careful. * * @category Text * * @package Text_Wiki * * @author Paul M. Jones <pmjones@php.net> * */ class Text_Wiki_Parse_Include extends Text_Wiki_Parse { var $conf = array( 'base' => '/path/to/scripts/' ); var $file = null; var $output = null; var $vars = null; /** * * The regular expression used to find source text matching this * rule. * * @access public * * @var string * */ var $regex = '/(\[\[include )(.+?)( .+?)?(\]\])/i'; /** * * Includes the results of the script directly into the source; the output * will subsequently be parsed by the remaining Text_Wiki rules. * * @access public * * @param array &$matches The array of matches from parse(). * * @return The results of the included script. * */ function process(&$matches) { // save the file location $this->file = $this->getConf('base', './') . $matches[2]; // extract attribs as variables in the local space $this->vars = $this->getAttrs($matches[3]); unset($this->vars['this']); extract($this->vars); // run the script ob_start(); include($this->file); $this->output = ob_get_contents(); ob_end_clean(); // done, place the script output directly in the source return $this->output; } } ?>