Sebastiaan Janssen
123 lines
4.1 KiB
C#
123 lines
4.1 KiB
C#
using System;
|
|
using System.Linq;
|
|
using System.Text.RegularExpressions;
|
|
using System.Web;
|
|
using System.Web.Security;
|
|
using uForum.Businesslogic;
|
|
using umbraco.BusinessLogic;
|
|
using umbraco.cms.businesslogic.member;
|
|
|
|
namespace uForum.Library
|
|
{
|
|
public class Utills
|
|
{
|
|
/// <summary>
|
|
/// sanitize any potentially dangerous tags from the provided raw HTML input using
|
|
/// a whitelist based approach, leaving the "safe" HTML tags
|
|
/// </summary>
|
|
public static string Sanitize(string html)
|
|
{
|
|
|
|
|
|
html = Regex.Replace(html, "<script.*?</script>", "", RegexOptions.Singleline | RegexOptions.IgnoreCase);
|
|
html = html.Replace("[code]", "<pre>");
|
|
html = html.Replace("[/code]", "</pre>");
|
|
|
|
var cleanHtml = CleanInvalidXmlChars(html);
|
|
|
|
// Add links to URLs that aren't "properly" linked in a markdown way
|
|
var regex = new Regex(@"(^|\s|>|;)(https?|ftp)(:\/\/[-A-Z0-9+&@#\/%?=~_|\[\]\(\)!:,\.;]*[-A-Z0-9+&@#\/%=~_|\[\]])($|\W)", RegexOptions.IgnoreCase | RegexOptions.Compiled);
|
|
|
|
var linkedHtml = regex.Replace(cleanHtml, "$1<a href=\"$2$3\" rel=\"nofollow\">$2$3</a>$4").Replace("href=\"www", "href=\"http://www");
|
|
|
|
return linkedHtml;
|
|
}
|
|
|
|
public static string CleanInvalidXmlChars(string text)
|
|
{
|
|
// From xml spec valid chars:
|
|
// #x9 | #xA | #xD | [#x20-#xD7FF] | [#xE000-#xFFFD] | [#x10000-#x10FFFF]
|
|
// any Unicode character, excluding the surrogate blocks, FFFE, and FFFF.
|
|
const string re = @"[^\x09\x0A\x0D\x20-\xD7FF\xE000-\xFFFD\x10000-x10FFFF]";
|
|
return Regex.Replace(text, re, "");
|
|
}
|
|
|
|
public static Member GetMember(int id)
|
|
{
|
|
try
|
|
{
|
|
return Member.GetMemberFromCache(id) ?? new Member(id);
|
|
}
|
|
catch (Exception exception)
|
|
{
|
|
Log.Add(LogTypes.Error, 0, string.Format("Could not get member {0} from the cache nor from the database - Exception: {1}", id, exception.InnerException));
|
|
}
|
|
|
|
return null;
|
|
}
|
|
|
|
public static bool IsMember(int id)
|
|
{
|
|
return (Businesslogic.Data.SqlHelper.ExecuteScalar<int>("select count(nodeid) from cmsMember where nodeid = '" + id + "'") > 0);
|
|
}
|
|
|
|
public static bool IsModerator()
|
|
{
|
|
var isModerator = false;
|
|
|
|
var currentMemberId = HttpContext.Current.User.Identity.IsAuthenticated ? (int)Membership.GetUser().ProviderUserKey : 0;
|
|
|
|
if (currentMemberId != 0)
|
|
{
|
|
var moderatorRoles = new[] {"admin", "HQ", "Core", "MVP"};
|
|
|
|
isModerator = moderatorRoles.Any(moderatorRole => Xslt.IsMemberInGroup(moderatorRole, currentMemberId));
|
|
}
|
|
|
|
return isModerator;
|
|
}
|
|
|
|
public static bool CanSeeTopic(int topicId)
|
|
{
|
|
var topic = Topic.GetTopic(topicId);
|
|
if(topic != null && topic.IsSpam == false)
|
|
return true;
|
|
|
|
var currentMember = Member.GetCurrentMember();
|
|
|
|
if(topic != null && currentMember != null && topic.IsSpam)
|
|
if(IsModerator() || topic.MemberId == currentMember.Id)
|
|
return true;
|
|
|
|
return false;
|
|
}
|
|
|
|
public static bool CanSeeComment(int commentId)
|
|
{
|
|
var comment = new Comment(commentId);
|
|
if(comment.IsSpam == false)
|
|
return true;
|
|
|
|
var currentMember = Member.GetCurrentMember();
|
|
|
|
if(currentMember != null && comment.IsSpam)
|
|
if(IsModerator() || comment.MemberId == currentMember.Id)
|
|
return true;
|
|
|
|
return false;
|
|
}
|
|
|
|
}
|
|
|
|
public struct ReplacePoint
|
|
{
|
|
public int open, close;
|
|
|
|
public ReplacePoint(int open, int close)
|
|
{
|
|
this.open = open;
|
|
this.close = close;
|
|
}
|
|
}
|
|
}
|