Changeset 2288 for trunk/bp-groups.php

Timestamp:

01/10/2010 09:55:51 PM (16 years ago)

Author:

apeatling

Message:

Fixing escaped allowed HTML in forum posts. Adding mention filters to blog comments and forum posts.

File:

• trunk/bp-groups.php (modified) (6 diffs)

trunk/bp-groups.php

@@ -2082 +2082 @@
         return false;
 
+    $post_text = apply_filters( 'group_forum_post_text_before_save', $post_text );
+    $topic_id = apply_filters( 'group_forum_post_topic_id_before_save', $topic_id );
+
     if ( $forum_post = bp_forums_insert_post( array( 'post_text' => $post_text, 'topic_id' => $topic_id ) ) ) {
         $topic = bp_forums_get_topic_details( $topic_id );
 
         $activity_content = sprintf( __( '%s posted on the forum topic %s in the group %s:', 'buddypress'), bp_core_get_userlink( $bp->loggedin_user->id ), '<a href="' . bp_get_group_permalink( $bp->groups->current_group ) . 'forum/topic/' . $topic->topic_slug .'/">' . attribute_escape( $topic->topic_title ) . '</a>', '<a href="' . bp_get_group_permalink( $bp->groups->current_group ) . '">' . attribute_escape( $bp->groups->current_group->name ) . '</a>' );
-        $activity_content .= '<blockquote>' . bp_create_excerpt( attribute_escape( $post_text ) ) . '</blockquote>';
+        $activity_content .= '<blockquote>' . bp_create_excerpt( $post_text ) . '</blockquote>';
 
         /* Record this in activity streams */
@@ -2111 +2114 @@
         return false;
 
+    $topic_title = apply_filters( 'group_forum_topic_title_before_save', $topic_title );
+    $topic_text = apply_filters( 'group_forum_topic_text_before_save', $topic_text );
+    $topic_tags = apply_filters( 'group_forum_topic_tags_before_save', $topic_tags );
+    $forum_id = apply_filters( 'group_forum_topic_forum_id_before_save', $forum_id );
+
     if ( $topic_id = bp_forums_new_topic( array( 'topic_title' => $topic_title, 'topic_text' => $topic_text, 'topic_tags' => $topic_tags, 'forum_id' => $forum_id ) ) ) {
         $topic = bp_forums_get_topic_details( $topic_id );
 
         $activity_content = sprintf( __( '%s started the forum topic %s in the group %s:', 'buddypress'), bp_core_get_userlink( $bp->loggedin_user->id ), '<a href="' . bp_get_group_permalink( $bp->groups->current_group ) . 'forum/topic/' . $topic->topic_slug .'/">' . attribute_escape( $topic->topic_title ) . '</a>', '<a href="' . bp_get_group_permalink( $bp->groups->current_group ) . '">' . attribute_escape( $bp->groups->current_group->name ) . '</a>' );
-        $activity_content .= '<blockquote>' . bp_create_excerpt( attribute_escape( $topic_text ) ) . '</blockquote>';
+        $activity_content .= '<blockquote>' . bp_create_excerpt( $topic_text ) . '</blockquote>';
 
         /* Record this in activity streams */
@@ -2137 +2145 @@
     global $bp;
 
+    $topic_title = apply_filters( 'group_forum_topic_title_before_save', $topic_title );
+    $topic_text = apply_filters( 'group_forum_topic_text_before_save', $topic_text );
+
     if ( $topic = bp_forums_update_topic( array( 'topic_title' => $topic_title, 'topic_text' => $topic_text, 'topic_id' => $topic_id ) ) ) {
         /* Update the activity stream item */
@@ -2143 +2154 @@
 
         $activity_content = sprintf( __( '%s started the forum topic %s in the group %s:', 'buddypress'), bp_core_get_userlink( $topic->topic_poster ), '<a href="' . bp_get_group_permalink( $bp->groups->current_group ) . 'forum/topic/' . $topic->topic_slug .'/">' . attribute_escape( $topic->topic_title ) . '</a>', '<a href="' . bp_get_group_permalink( $bp->groups->current_group ) . '">' . attribute_escape( $bp->groups->current_group->name ) . '</a>' );
-        $activity_content .= '<blockquote>' . bp_create_excerpt( attribute_escape( $topic_text ) ) . '</blockquote>';
+        $activity_content .= '<blockquote>' . bp_create_excerpt( $topic_text ) . '</blockquote>';
 
         /* Record this in activity streams */
@@ -2167 +2178 @@
     global $bp;
 
+    $post_text = apply_filters( 'group_forum_post_text_before_save', $post_text );
+    $topic_id = apply_filters( 'group_forum_post_topic_id_before_save', $topic_id );
+
     $post = bp_forums_get_post( $post_id );
 
@@ -2177 +2191 @@
 
         $activity_content = sprintf( __( '%s posted on the forum topic %s in the group %s:', 'buddypress'), bp_core_get_userlink( $post->poster_id ), '<a href="' . bp_get_group_permalink( $bp->groups->current_group ) . 'forum/topic/' . $topic->topic_slug .'">' . attribute_escape( $topic->topic_title ) . '</a>', '<a href="' . bp_get_group_permalink( $bp->groups->current_group ) . '">' . attribute_escape( $bp->groups->current_group->name ) . '</a>' );
-        $activity_content .= '<blockquote>' . bp_create_excerpt( attribute_escape( $post_text ) ) . '</blockquote>';
+        $activity_content .= '<blockquote>' . bp_create_excerpt( $post_text ) . '</blockquote>';
 
         /* Record this in activity streams */