Linux node5458.myfcloud.com 6.10.2-x86_64-linode165 #1 SMP PREEMPT_DYNAMIC Tue Jul 30 15:03:21 EDT 2024 x86_64
Apache
: 45.79.123.194 | : 18.222.47.31
16 Domain
7.4.33
addify5
shells.trxsecurity.org
Terminal
AUTO ROOT
Adminer
Backdoor Destroyer
Linux Exploit
Lock Shell
Lock File
Create User
CREATE RDP
PHP Mailer
BACKCONNECT
UNLOCK SHELL
HASH IDENTIFIER
Backdoor Scanner
Backdoor Create
Alfa Webshell
CPANEL RESET
CREATE WP USER
README
+ Create Folder
+ Create File
/
home /
addify5 /
public_html /
VISIONSOFT /
wp-includes /
[ HOME SHELL ]
Name
Size
Permission
Action
.pkexec
[ DIR ]
drwxr-xr-x
GCONV_PATH=.
[ DIR ]
drwxr-xr-x
ID3
[ DIR ]
drwxrwxrwx
IXR
[ DIR ]
drwxrwxrwx
PHPMailer
[ DIR ]
drwxrwxrwx
Requests
[ DIR ]
drwxrwxrwx
SimplePie
[ DIR ]
drwxrwxrwx
Text
[ DIR ]
drwxrwxrwx
assets
[ DIR ]
drwxrwxrwx
block-patterns
[ DIR ]
drwxrwxrwx
blocks
[ DIR ]
drwxrwxrwx
certificates
[ DIR ]
drwxrwxrwx
css
[ DIR ]
drwxrwxrwx
customize
[ DIR ]
drwxrwxrwx
fonts
[ DIR ]
drwxrwxrwx
images
[ DIR ]
drwxrwxrwx
js
[ DIR ]
drwxrwxrwx
pomo
[ DIR ]
drwxrwxrwx
random_compat
[ DIR ]
drwxrwxrwx
rest-api
[ DIR ]
drwxrwxrwx
sitemaps
[ DIR ]
drwxrwxrwx
sodium_compat
[ DIR ]
drwxrwxrwx
theme-compat
[ DIR ]
drwxrwxrwx
widgets
[ DIR ]
drwxrwxrwx
.htaccess
420
B
-rw-r--r--
.mad-root
0
B
-rw-r--r--
admin-bar.php
30.96
KB
-rw-r--r--
atomlib.php
11.59
KB
-rw-r--r--
author-template.php
16.62
KB
-rw-r--r--
block-patterns.php
1.42
KB
-rw-r--r--
blocks.php
25.76
KB
-rw-r--r--
bookmark-template.php
12.22
KB
-rw-r--r--
bookmark.php
14.79
KB
-rw-r--r--
cache-compat.php
1.02
KB
-rw-r--r--
cache.php
9.28
KB
-rw-r--r--
canonical.php
30.65
KB
-rw-r--r--
capabilities.php
33.98
KB
-rw-r--r--
category-template.php
53.63
KB
-rw-r--r--
category.php
12.41
KB
-rw-r--r--
class-IXR.php
2.48
KB
-rw-r--r--
class-feed.php
529
B
-rw-r--r--
class-http.php
38.79
KB
-rw-r--r--
class-json.php
42.43
KB
-rw-r--r--
class-oembed.php
407
B
-rw-r--r--
class-phpass.php
7.15
KB
-rw-r--r--
class-phpmailer.php
664
B
-rw-r--r--
class-pop3.php
20.35
KB
-rw-r--r--
class-requests.php
29.14
KB
-rw-r--r--
class-simplepie.php
94.01
KB
-rw-r--r--
class-smtp.php
452
B
-rw-r--r--
class-snoopy.php
36.83
KB
-rw-r--r--
class-walker-category-dropdown...
2.08
KB
-rw-r--r--
class-walker-category.php
7.69
KB
-rw-r--r--
class-walker-comment.php
13.37
KB
-rw-r--r--
class-walker-nav-menu.php
8.45
KB
-rw-r--r--
class-walker-page-dropdown.php
2.25
KB
-rw-r--r--
class-walker-page.php
6.88
KB
-rw-r--r--
class-wp-admin-bar.php
16.46
KB
-rw-r--r--
class-wp-ajax-response.php
5.12
KB
-rw-r--r--
class-wp-block-list.php
4.37
KB
-rw-r--r--
class-wp-block-parser.php
14.86
KB
-rw-r--r--
class-wp-block-pattern-categor...
4.08
KB
-rw-r--r--
class-wp-block-patterns-regist...
4.74
KB
-rw-r--r--
class-wp-block-styles-registry...
4.62
KB
-rw-r--r--
class-wp-block-type-registry.p...
5.03
KB
-rw-r--r--
class-wp-block-type.php
5.88
KB
-rw-r--r--
class-wp-block.php
5.97
KB
-rw-r--r--
class-wp-comment-query.php
43.58
KB
-rw-r--r--
class-wp-comment.php
8.83
KB
-rw-r--r--
class-wp-customize-control.php
24.91
KB
-rw-r--r--
class-wp-customize-manager.php
196.37
KB
-rw-r--r--
class-wp-customize-nav-menus.p...
55.47
KB
-rw-r--r--
class-wp-customize-panel.php
10.16
KB
-rw-r--r--
class-wp-customize-section.php
10.72
KB
-rw-r--r--
class-wp-customize-setting.php
29.03
KB
-rw-r--r--
class-wp-customize-widgets.php
65.46
KB
-rw-r--r--
class-wp-date-query.php
34.51
KB
-rw-r--r--
class-wp-dependency.php
2.45
KB
-rw-r--r--
class-wp-editor.php
68.93
KB
-rw-r--r--
class-wp-embed.php
15.42
KB
-rw-r--r--
class-wp-error.php
4.84
KB
-rw-r--r--
class-wp-fatal-error-handler.p...
7.37
KB
-rw-r--r--
class-wp-feed-cache-transient....
2.5
KB
-rw-r--r--
class-wp-feed-cache.php
749
B
-rw-r--r--
class-wp-hook.php
13.72
KB
-rw-r--r--
class-wp-http-cookie.php
7.02
KB
-rw-r--r--
class-wp-http-curl.php
12.06
KB
-rw-r--r--
class-wp-http-encoding.php
6.4
KB
-rw-r--r--
class-wp-http-ixr-client.php
3.39
KB
-rw-r--r--
class-wp-http-proxy.php
5.73
KB
-rw-r--r--
class-wp-http-requests-hooks.p...
1.92
KB
-rw-r--r--
class-wp-http-requests-respons...
4.24
KB
-rw-r--r--
class-wp-http-response.php
2.88
KB
-rw-r--r--
class-wp-http-streams.php
15.73
KB
-rw-r--r--
class-wp-image-editor-gd.php
13.81
KB
-rw-r--r--
class-wp-image-editor-imagick....
23.32
KB
-rw-r--r--
class-wp-image-editor.php
13.77
KB
-rw-r--r--
class-wp-list-util.php
6.46
KB
-rw-r--r--
class-wp-locale-switcher.php
4.9
KB
-rw-r--r--
class-wp-locale.php
13.59
KB
-rw-r--r--
class-wp-matchesmapregex.php
1.76
KB
-rw-r--r--
class-wp-meta-query.php
27.22
KB
-rw-r--r--
class-wp-metadata-lazyloader.p...
5.26
KB
-rw-r--r--
class-wp-network-query.php
17.94
KB
-rw-r--r--
class-wp-network.php
12.09
KB
-rw-r--r--
class-wp-object-cache.php
13.22
KB
-rw-r--r--
class-wp-oembed-controller.php
6.63
KB
-rw-r--r--
class-wp-oembed.php
28.31
KB
-rw-r--r--
class-wp-paused-extensions-sto...
4.81
KB
-rw-r--r--
class-wp-post-type.php
19.08
KB
-rw-r--r--
class-wp-post.php
6.29
KB
-rw-r--r--
class-wp-query.php
131.8
KB
-rw-r--r--
class-wp-recovery-mode-cookie-...
6.31
KB
-rw-r--r--
class-wp-recovery-mode-email-s...
9.89
KB
-rw-r--r--
class-wp-recovery-mode-key-ser...
4.17
KB
-rw-r--r--
class-wp-recovery-mode-link-se...
3.29
KB
-rw-r--r--
class-wp-recovery-mode.php
11.11
KB
-rw-r--r--
class-wp-rewrite.php
59.42
KB
-rw-r--r--
class-wp-role.php
2.44
KB
-rw-r--r--
class-wp-roles.php
8.23
KB
-rw-r--r--
class-wp-session-tokens.php
7.26
KB
-rw-r--r--
class-wp-simplepie-file.php
2.27
KB
-rw-r--r--
class-wp-simplepie-sanitize-ks...
1.73
KB
-rw-r--r--
class-wp-site-query.php
27.88
KB
-rw-r--r--
class-wp-site.php
7.19
KB
-rw-r--r--
class-wp-tax-query.php
18.98
KB
-rw-r--r--
class-wp-taxonomy.php
12.28
KB
-rw-r--r--
class-wp-term-query.php
35.32
KB
-rw-r--r--
class-wp-term.php
5.14
KB
-rw-r--r--
class-wp-text-diff-renderer-in...
716
B
-rw-r--r--
class-wp-text-diff-renderer-ta...
16.48
KB
-rw-r--r--
class-wp-theme.php
50.35
KB
-rw-r--r--
class-wp-user-meta-session-tok...
2.92
KB
-rw-r--r--
class-wp-user-query.php
30.62
KB
-rw-r--r--
class-wp-user-request.php
2.14
KB
-rw-r--r--
class-wp-user.php
21.63
KB
-rw-r--r--
class-wp-walker.php
12.42
KB
-rw-r--r--
class-wp-widget-factory.php
2.56
KB
-rw-r--r--
class-wp-widget.php
17.49
KB
-rw-r--r--
class-wp-xmlrpc-server.php
205.52
KB
-rw-r--r--
class-wp.php
24.45
KB
-rw-r--r--
class.wp-dependencies.php
12.57
KB
-rw-r--r--
class.wp-scripts.php
18.04
KB
-rw-r--r--
class.wp-styles.php
10.62
KB
-rw-r--r--
comment-template.php
91.85
KB
-rw-r--r--
comment.php
122.66
KB
-rw-r--r--
compat.php
12.65
KB
-rw-r--r--
cron.php
32.06
KB
-rw-r--r--
date.php
406
B
-rw-r--r--
default-constants.php
10.02
KB
-rw-r--r--
default-filters.php
26.14
KB
-rw-r--r--
default-widgets.php
2.07
KB
-rw-r--r--
deprecated.php
118.65
KB
-rw-r--r--
embed-template.php
341
B
-rw-r--r--
embed.php
46.48
KB
-rw-r--r--
error-protection.php
3.3
KB
-rw-r--r--
error_log
167
B
-rwxrwxrwx
feed-atom-comments.php
5.32
KB
-rw-r--r--
feed-atom.php
3.03
KB
-rw-r--r--
feed-rdf.php
2.61
KB
-rw-r--r--
feed-rss.php
1.16
KB
-rw-r--r--
feed-rss2-comments.php
3.97
KB
-rw-r--r--
feed-rss2.php
3.71
KB
-rw-r--r--
feed.php
22.12
KB
-rw-r--r--
formatting.php
304.25
KB
-rw-r--r--
functions.php
228.27
KB
-rw-r--r--
functions.wp-scripts.php
13.07
KB
-rw-r--r--
functions.wp-styles.php
8.11
KB
-rw-r--r--
general-template.php
153.99
KB
-rw-r--r--
http.php
21.86
KB
-rw-r--r--
kses.php
61.88
KB
-rw-r--r--
l10n.php
55.27
KB
-rw-r--r--
link-template.php
141.46
KB
-rw-r--r--
load.php
43.82
KB
-rw-r--r--
locale.php
162
B
-rw-r--r--
media-template.php
57.29
KB
-rw-r--r--
media.php
159.3
KB
-rw-r--r--
meta.php
58.17
KB
-rw-r--r--
ms-blogs.php
24.58
KB
-rw-r--r--
ms-default-constants.php
4.6
KB
-rw-r--r--
ms-default-filters.php
6.34
KB
-rw-r--r--
ms-deprecated.php
20.63
KB
-rw-r--r--
ms-files.php
2.58
KB
-rw-r--r--
ms-functions.php
88.26
KB
-rw-r--r--
ms-load.php
19.36
KB
-rw-r--r--
ms-network.php
3.57
KB
-rw-r--r--
ms-settings.php
4.03
KB
-rw-r--r--
ms-site.php
42.51
KB
-rw-r--r--
nav-menu-template.php
22.75
KB
-rw-r--r--
nav-menu.php
40.78
KB
-rw-r--r--
option.php
72.65
KB
-rw-r--r--
pluggable-deprecated.php
6.12
KB
-rw-r--r--
pluggable.php
99.86
KB
-rw-r--r--
plugin.php
31.66
KB
-rw-r--r--
post-formats.php
6.91
KB
-rw-r--r--
post-template.php
62.05
KB
-rw-r--r--
post-thumbnail-template.php
9
KB
-rw-r--r--
post.php
245.87
KB
-rw-r--r--
pwnkit
10.99
KB
-rwxr-xr-x
query.php
34.69
KB
-rw-r--r--
registration-functions.php
202
B
-rw-r--r--
registration.php
202
B
-rw-r--r--
rest-api.php
65.83
KB
-rw-r--r--
revision.php
21.46
KB
-rw-r--r--
rewrite.php
17.65
KB
-rw-r--r--
rss-functions.php
211
B
-rw-r--r--
rss.php
22.44
KB
-rw-r--r--
script-loader.php
89.87
KB
-rw-r--r--
session.php
258
B
-rw-r--r--
shortcodes.php
21.85
KB
-rw-r--r--
sitemaps.php
3.16
KB
-rw-r--r--
spl-autoload-compat.php
443
B
-rw-r--r--
taxonomy.php
158.32
KB
-rw-r--r--
template-loader.php
2.94
KB
-rw-r--r--
template.php
21.02
KB
-rw-r--r--
theme.php
120.92
KB
-rw-r--r--
update.php
25.57
KB
-rw-r--r--
user.php
129.65
KB
-rw-r--r--
vars.php
5.68
KB
-rw-r--r--
version.php
767
B
-rw-r--r--
widgets.php
57.75
KB
-rw-r--r--
wlwmanifest.xml
1.02
KB
-rwxrwxrwx
wp-db.php
103.12
KB
-rw-r--r--
wp-diff.php
647
B
-rw-r--r--
wp-feed.php
82
B
-rw-r--r--
wp-tmp.php
9.04
KB
-rw-r--r--
Delete
Unzip
Zip
${this.title}
Close
Code Editor : shortcodes.php
<?php /** * WordPress API for creating bbcode-like tags or what WordPress calls * "shortcodes". The tag and attribute parsing or regular expression code is * based on the Textpattern tag parser. * * A few examples are below: * * [shortcode /] * [shortcode foo="bar" baz="bing" /] * [shortcode foo="bar"]content[/shortcode] * * Shortcode tags support attributes and enclosed content, but does not entirely * support inline shortcodes in other shortcodes. You will have to call the * shortcode parser in your function to account for that. * * {@internal * Please be aware that the above note was made during the beta of WordPress 2.6 * and in the future may not be accurate. Please update the note when it is no * longer the case.}} * * To apply shortcode tags to content: * * $out = do_shortcode( $content ); * * @link https://developer.wordpress.org/plugins/shortcodes/ * * @package WordPress * @subpackage Shortcodes * @since 2.5.0 */ /** * Container for storing shortcode tags and their hook to call for the shortcode * * @since 2.5.0 * * @name $shortcode_tags * @var array * @global array $shortcode_tags */ $shortcode_tags = array(); /** * Adds a new shortcode. * * Care should be taken through prefixing or other means to ensure that the * shortcode tag being added is unique and will not conflict with other, * already-added shortcode tags. In the event of a duplicated tag, the tag * loaded last will take precedence. * * @since 2.5.0 * * @global array $shortcode_tags * * @param string $tag Shortcode tag to be searched in post content. * @param callable $callback The callback function to run when the shortcode is found. * Every shortcode callback is passed three parameters by default, * including an array of attributes (`$atts`), the shortcode content * or null if not set (`$content`), and finally the shortcode tag * itself (`$shortcode_tag`), in that order. */ function add_shortcode( $tag, $callback ) { global $shortcode_tags; if ( '' === trim( $tag ) ) { $message = __( 'Invalid shortcode name: Empty name given.' ); _doing_it_wrong( __FUNCTION__, $message, '4.4.0' ); return; } if ( 0 !== preg_match( '@[<>&/\[\]\x00-\x20=]@', $tag ) ) { /* translators: 1: Shortcode name, 2: Space-separated list of reserved characters. */ $message = sprintf( __( 'Invalid shortcode name: %1$s. Do not use spaces or reserved characters: %2$s' ), $tag, '& / < > [ ] =' ); _doing_it_wrong( __FUNCTION__, $message, '4.4.0' ); return; } $shortcode_tags[ $tag ] = $callback; } /** * Removes hook for shortcode. * * @since 2.5.0 * * @global array $shortcode_tags * * @param string $tag Shortcode tag to remove hook for. */ function remove_shortcode( $tag ) { global $shortcode_tags; unset( $shortcode_tags[ $tag ] ); } /** * Clear all shortcodes. * * This function is simple, it clears all of the shortcode tags by replacing the * shortcodes global by a empty array. This is actually a very efficient method * for removing all shortcodes. * * @since 2.5.0 * * @global array $shortcode_tags */ function remove_all_shortcodes() { global $shortcode_tags; $shortcode_tags = array(); } /** * Whether a registered shortcode exists named $tag * * @since 3.6.0 * * @global array $shortcode_tags List of shortcode tags and their callback hooks. * * @param string $tag Shortcode tag to check. * @return bool Whether the given shortcode exists. */ function shortcode_exists( $tag ) { global $shortcode_tags; return array_key_exists( $tag, $shortcode_tags ); } /** * Whether the passed content contains the specified shortcode * * @since 3.6.0 * * @global array $shortcode_tags * * @param string $content Content to search for shortcodes. * @param string $tag Shortcode tag to check. * @return bool Whether the passed content contains the given shortcode. */ function has_shortcode( $content, $tag ) { if ( false === strpos( $content, '[' ) ) { return false; } if ( shortcode_exists( $tag ) ) { preg_match_all( '/' . get_shortcode_regex() . '/', $content, $matches, PREG_SET_ORDER ); if ( empty( $matches ) ) { return false; } foreach ( $matches as $shortcode ) { if ( $tag === $shortcode[2] ) { return true; } elseif ( ! empty( $shortcode[5] ) && has_shortcode( $shortcode[5], $tag ) ) { return true; } } } return false; } /** * Returns a list of registered shortcode names found in the given content. * * Example usage: * * get_shortcode_tags_in_content( '[audio src="file.mp3"][/audio] [foo] [gallery ids="1,2,3"]' ); * // array( 'audio', 'gallery' ) * * @since 6.3.2 * * @param string $content The content to check. * @return string[] An array of registered shortcode names found in the content. */ function get_shortcode_tags_in_content( $content ) { if ( false === strpos( $content, '[' ) ) { return array(); } preg_match_all( '/' . get_shortcode_regex() . '/', $content, $matches, PREG_SET_ORDER ); if ( empty( $matches ) ) { return array(); } $tags = array(); foreach ( $matches as $shortcode ) { $tags[] = $shortcode[2]; if ( ! empty( $shortcode[5] ) ) { $deep_tags = get_shortcode_tags_in_content( $shortcode[5] ); if ( ! empty( $deep_tags ) ) { $tags = array_merge( $tags, $deep_tags ); } } } return $tags; } /** * Searches content for shortcodes and filter shortcodes through their hooks. * * This function is an alias for do_shortcode(). * * @since 5.4.0 * * @see do_shortcode() * * @param string $content Content to search for shortcodes. * @param bool $ignore_html When true, shortcodes inside HTML elements will be skipped. * Default false. * @return string Content with shortcodes filtered out. */ function apply_shortcodes( $content, $ignore_html = false ) { return do_shortcode( $content, $ignore_html ); } /** * Search content for shortcodes and filter shortcodes through their hooks. * * If there are no shortcode tags defined, then the content will be returned * without any filtering. This might cause issues when plugins are disabled but * the shortcode will still show up in the post or content. * * @since 2.5.0 * * @global array $shortcode_tags List of shortcode tags and their callback hooks. * * @param string $content Content to search for shortcodes. * @param bool $ignore_html When true, shortcodes inside HTML elements will be skipped. * Default false. * @return string Content with shortcodes filtered out. */ function do_shortcode( $content, $ignore_html = false ) { global $shortcode_tags; if ( false === strpos( $content, '[' ) ) { return $content; } if ( empty( $shortcode_tags ) || ! is_array( $shortcode_tags ) ) { return $content; } // Find all registered tag names in $content. preg_match_all( '@\[([^<>&/\[\]\x00-\x20=]++)@', $content, $matches ); $tagnames = array_intersect( array_keys( $shortcode_tags ), $matches[1] ); if ( empty( $tagnames ) ) { return $content; } $content = do_shortcodes_in_html_tags( $content, $ignore_html, $tagnames ); $pattern = get_shortcode_regex( $tagnames ); $content = preg_replace_callback( "/$pattern/", 'do_shortcode_tag', $content ); // Always restore square braces so we don't break things like <!--[if IE ]>. $content = unescape_invalid_shortcodes( $content ); return $content; } /** * Retrieve the shortcode regular expression for searching. * * The regular expression combines the shortcode tags in the regular expression * in a regex class. * * The regular expression contains 6 different sub matches to help with parsing. * * 1 - An extra [ to allow for escaping shortcodes with double [[]] * 2 - The shortcode name * 3 - The shortcode argument list * 4 - The self closing / * 5 - The content of a shortcode when it wraps some content. * 6 - An extra ] to allow for escaping shortcodes with double [[]] * * @since 2.5.0 * @since 4.4.0 Added the `$tagnames` parameter. * * @global array $shortcode_tags * * @param array $tagnames Optional. List of shortcodes to find. Defaults to all registered shortcodes. * @return string The shortcode search regular expression */ function get_shortcode_regex( $tagnames = null ) { global $shortcode_tags; if ( empty( $tagnames ) ) { $tagnames = array_keys( $shortcode_tags ); } $tagregexp = join( '|', array_map( 'preg_quote', $tagnames ) ); // WARNING! Do not change this regex without changing do_shortcode_tag() and strip_shortcode_tag(). // Also, see shortcode_unautop() and shortcode.js. // phpcs:disable Squiz.Strings.ConcatenationSpacing.PaddingFound -- don't remove regex indentation return '\\[' // Opening bracket. . '(\\[?)' // 1: Optional second opening bracket for escaping shortcodes: [[tag]]. . "($tagregexp)" // 2: Shortcode name. . '(?![\\w-])' // Not followed by word character or hyphen. . '(' // 3: Unroll the loop: Inside the opening shortcode tag. . '[^\\]\\/]*' // Not a closing bracket or forward slash. . '(?:' . '\\/(?!\\])' // A forward slash not followed by a closing bracket. . '[^\\]\\/]*' // Not a closing bracket or forward slash. . ')*?' . ')' . '(?:' . '(\\/)' // 4: Self closing tag... . '\\]' // ...and closing bracket. . '|' . '\\]' // Closing bracket. . '(?:' . '(' // 5: Unroll the loop: Optionally, anything between the opening and closing shortcode tags. . '[^\\[]*+' // Not an opening bracket. . '(?:' . '\\[(?!\\/\\2\\])' // An opening bracket not followed by the closing shortcode tag. . '[^\\[]*+' // Not an opening bracket. . ')*+' . ')' . '\\[\\/\\2\\]' // Closing shortcode tag. . ')?' . ')' . '(\\]?)'; // 6: Optional second closing brocket for escaping shortcodes: [[tag]]. // phpcs:enable } /** * Regular Expression callable for do_shortcode() for calling shortcode hook. * * @see get_shortcode_regex for details of the match array contents. * * @since 2.5.0 * @access private * * @global array $shortcode_tags * * @param array $m Regular expression match array * @return string|false False on failure. */ function do_shortcode_tag( $m ) { global $shortcode_tags; // Allow [[foo]] syntax for escaping a tag. if ( '[' === $m[1] && ']' === $m[6] ) { return substr( $m[0], 1, -1 ); } $tag = $m[2]; $attr = shortcode_parse_atts( $m[3] ); if ( ! is_callable( $shortcode_tags[ $tag ] ) ) { /* translators: %s: Shortcode tag. */ $message = sprintf( __( 'Attempting to parse a shortcode without a valid callback: %s' ), $tag ); _doing_it_wrong( __FUNCTION__, $message, '4.3.0' ); return $m[0]; } /** * Filters whether to call a shortcode callback. * * Returning a non-false value from filter will short-circuit the * shortcode generation process, returning that value instead. * * @since 4.7.0 * * @param false|string $return Short-circuit return value. Either false or the value to replace the shortcode with. * @param string $tag Shortcode name. * @param array|string $attr Shortcode attributes array or empty string. * @param array $m Regular expression match array. */ $return = apply_filters( 'pre_do_shortcode_tag', false, $tag, $attr, $m ); if ( false !== $return ) { return $return; } $content = isset( $m[5] ) ? $m[5] : null; $output = $m[1] . call_user_func( $shortcode_tags[ $tag ], $attr, $content, $tag ) . $m[6]; /** * Filters the output created by a shortcode callback. * * @since 4.7.0 * * @param string $output Shortcode output. * @param string $tag Shortcode name. * @param array|string $attr Shortcode attributes array or empty string. * @param array $m Regular expression match array. */ return apply_filters( 'do_shortcode_tag', $output, $tag, $attr, $m ); } /** * Search only inside HTML elements for shortcodes and process them. * * Any [ or ] characters remaining inside elements will be HTML encoded * to prevent interference with shortcodes that are outside the elements. * Assumes $content processed by KSES already. Users with unfiltered_html * capability may get unexpected output if angle braces are nested in tags. * * @since 4.2.3 * * @param string $content Content to search for shortcodes. * @param bool $ignore_html When true, all square braces inside elements will be encoded. * @param array $tagnames List of shortcodes to find. * @return string Content with shortcodes filtered out. */ function do_shortcodes_in_html_tags( $content, $ignore_html, $tagnames ) { // Normalize entities in unfiltered HTML before adding placeholders. $trans = array( '[' => '[', ']' => ']', ); $content = strtr( $content, $trans ); $trans = array( '[' => '[', ']' => ']', ); $pattern = get_shortcode_regex( $tagnames ); $textarr = wp_html_split( $content ); foreach ( $textarr as &$element ) { if ( '' === $element || '<' !== $element[0] ) { continue; } $noopen = false === strpos( $element, '[' ); $noclose = false === strpos( $element, ']' ); if ( $noopen || $noclose ) { // This element does not contain shortcodes. if ( $noopen xor $noclose ) { // Need to encode stray '[' or ']' chars. $element = strtr( $element, $trans ); } continue; } if ( $ignore_html || '<!--' === substr( $element, 0, 4 ) || '<![CDATA[' === substr( $element, 0, 9 ) ) { // Encode all '[' and ']' chars. $element = strtr( $element, $trans ); continue; } $attributes = wp_kses_attr_parse( $element ); if ( false === $attributes ) { // Some plugins are doing things like [name] <[email]>. if ( 1 === preg_match( '%^<\s*\[\[?[^\[\]]+\]%', $element ) ) { $element = preg_replace_callback( "/$pattern/", 'do_shortcode_tag', $element ); } // Looks like we found some crazy unfiltered HTML. Skipping it for sanity. $element = strtr( $element, $trans ); continue; } // Get element name. $front = array_shift( $attributes ); $back = array_pop( $attributes ); $matches = array(); preg_match( '%[a-zA-Z0-9]+%', $front, $matches ); $elname = $matches[0]; // Look for shortcodes in each attribute separately. foreach ( $attributes as &$attr ) { $open = strpos( $attr, '[' ); $close = strpos( $attr, ']' ); if ( false === $open || false === $close ) { continue; // Go to next attribute. Square braces will be escaped at end of loop. } $double = strpos( $attr, '"' ); $single = strpos( $attr, "'" ); if ( ( false === $single || $open < $single ) && ( false === $double || $open < $double ) ) { /* * $attr like '[shortcode]' or 'name = [shortcode]' implies unfiltered_html. * In this specific situation we assume KSES did not run because the input * was written by an administrator, so we should avoid changing the output * and we do not need to run KSES here. */ $attr = preg_replace_callback( "/$pattern/", 'do_shortcode_tag', $attr ); } else { // $attr like 'name = "[shortcode]"' or "name = '[shortcode]'". // We do not know if $content was unfiltered. Assume KSES ran before shortcodes. $count = 0; $new_attr = preg_replace_callback( "/$pattern/", 'do_shortcode_tag', $attr, -1, $count ); if ( $count > 0 ) { // Sanitize the shortcode output using KSES. $new_attr = wp_kses_one_attr( $new_attr, $elname ); if ( '' !== trim( $new_attr ) ) { // The shortcode is safe to use now. $attr = $new_attr; } } } } $element = $front . implode( '', $attributes ) . $back; // Now encode any remaining '[' or ']' chars. $element = strtr( $element, $trans ); } $content = implode( '', $textarr ); return $content; } /** * Remove placeholders added by do_shortcodes_in_html_tags(). * * @since 4.2.3 * * @param string $content Content to search for placeholders. * @return string Content with placeholders removed. */ function unescape_invalid_shortcodes( $content ) { // Clean up entire string, avoids re-parsing HTML. $trans = array( '[' => '[', ']' => ']', ); $content = strtr( $content, $trans ); return $content; } /** * Retrieve the shortcode attributes regex. * * @since 4.4.0 * * @return string The shortcode attribute regular expression */ function get_shortcode_atts_regex() { return '/([\w-]+)\s*=\s*"([^"]*)"(?:\s|$)|([\w-]+)\s*=\s*\'([^\']*)\'(?:\s|$)|([\w-]+)\s*=\s*([^\s\'"]+)(?:\s|$)|"([^"]*)"(?:\s|$)|\'([^\']*)\'(?:\s|$)|(\S+)(?:\s|$)/'; } /** * Retrieve all attributes from the shortcodes tag. * * The attributes list has the attribute name as the key and the value of the * attribute as the value in the key/value pair. This allows for easier * retrieval of the attributes, since all attributes have to be known. * * @since 2.5.0 * * @param string $text * @return array|string List of attribute values. * Returns empty array if '""' === trim( $text ). * Returns empty string if '' === trim( $text ). * All other matches are checked for not empty(). */ function shortcode_parse_atts( $text ) { $atts = array(); $pattern = get_shortcode_atts_regex(); $text = preg_replace( "/[\x{00a0}\x{200b}]+/u", ' ', $text ); if ( preg_match_all( $pattern, $text, $match, PREG_SET_ORDER ) ) { foreach ( $match as $m ) { if ( ! empty( $m[1] ) ) { $atts[ strtolower( $m[1] ) ] = stripcslashes( $m[2] ); } elseif ( ! empty( $m[3] ) ) { $atts[ strtolower( $m[3] ) ] = stripcslashes( $m[4] ); } elseif ( ! empty( $m[5] ) ) { $atts[ strtolower( $m[5] ) ] = stripcslashes( $m[6] ); } elseif ( isset( $m[7] ) && strlen( $m[7] ) ) { $atts[] = stripcslashes( $m[7] ); } elseif ( isset( $m[8] ) && strlen( $m[8] ) ) { $atts[] = stripcslashes( $m[8] ); } elseif ( isset( $m[9] ) ) { $atts[] = stripcslashes( $m[9] ); } } // Reject any unclosed HTML elements. foreach ( $atts as &$value ) { if ( false !== strpos( $value, '<' ) ) { if ( 1 !== preg_match( '/^[^<]*+(?:<[^>]*+>[^<]*+)*+$/', $value ) ) { $value = ''; } } } } else { $atts = ltrim( $text ); } return $atts; } /** * Combine user attributes with known attributes and fill in defaults when needed. * * The pairs should be considered to be all of the attributes which are * supported by the caller and given as a list. The returned attributes will * only contain the attributes in the $pairs list. * * If the $atts list has unsupported attributes, then they will be ignored and * removed from the final returned list. * * @since 2.5.0 * * @param array $pairs Entire list of supported attributes and their defaults. * @param array $atts User defined attributes in shortcode tag. * @param string $shortcode Optional. The name of the shortcode, provided for context to enable filtering * @return array Combined and filtered attribute list. */ function shortcode_atts( $pairs, $atts, $shortcode = '' ) { $atts = (array) $atts; $out = array(); foreach ( $pairs as $name => $default ) { if ( array_key_exists( $name, $atts ) ) { $out[ $name ] = $atts[ $name ]; } else { $out[ $name ] = $default; } } if ( $shortcode ) { /** * Filters shortcode attributes. * * If the third parameter of the shortcode_atts() function is present then this filter is available. * The third parameter, $shortcode, is the name of the shortcode. * * @since 3.6.0 * @since 4.4.0 Added the `$shortcode` parameter. * * @param array $out The output array of shortcode attributes. * @param array $pairs The supported attributes and their defaults. * @param array $atts The user defined shortcode attributes. * @param string $shortcode The shortcode name. */ $out = apply_filters( "shortcode_atts_{$shortcode}", $out, $pairs, $atts, $shortcode ); } return $out; } /** * Remove all shortcode tags from the given content. * * @since 2.5.0 * * @global array $shortcode_tags * * @param string $content Content to remove shortcode tags. * @return string Content without shortcode tags. */ function strip_shortcodes( $content ) { global $shortcode_tags; if ( false === strpos( $content, '[' ) ) { return $content; } if ( empty( $shortcode_tags ) || ! is_array( $shortcode_tags ) ) { return $content; } // Find all registered tag names in $content. preg_match_all( '@\[([^<>&/\[\]\x00-\x20=]++)@', $content, $matches ); $tags_to_remove = array_keys( $shortcode_tags ); /** * Filters the list of shortcode tags to remove from the content. * * @since 4.7.0 * * @param array $tags_to_remove Array of shortcode tags to remove. * @param string $content Content shortcodes are being removed from. */ $tags_to_remove = apply_filters( 'strip_shortcodes_tagnames', $tags_to_remove, $content ); $tagnames = array_intersect( $tags_to_remove, $matches[1] ); if ( empty( $tagnames ) ) { return $content; } $content = do_shortcodes_in_html_tags( $content, true, $tagnames ); $pattern = get_shortcode_regex( $tagnames ); $content = preg_replace_callback( "/$pattern/", 'strip_shortcode_tag', $content ); // Always restore square braces so we don't break things like <!--[if IE ]>. $content = unescape_invalid_shortcodes( $content ); return $content; } /** * Strips a shortcode tag based on RegEx matches against post content. * * @since 3.3.0 * * @param array $m RegEx matches against post content. * @return string|false The content stripped of the tag, otherwise false. */ function strip_shortcode_tag( $m ) { // Allow [[foo]] syntax for escaping a tag. if ( '[' === $m[1] && ']' === $m[6] ) { return substr( $m[0], 1, -1 ); } return $m[1] . $m[6]; }
Close