Edit File by line

<?php

[0] Fix | Delete

[1] Fix | Delete

/**

[2] Fix | Delete

* Checks whether a string is a valid NAME token.

[3] Fix | Delete

[4] Fix | Delete

* ID and NAME tokens must begin with a letter ([A-Za-z])

[5] Fix | Delete

* and may be followed by any number of letters, digits ([0-9]),

[6] Fix | Delete

* hyphens ("-"), underscores ("_"), colons (":"), and periods (".").

[7] Fix | Delete

[8] Fix | Delete

* @link http://www.w3.org/TR/html401/types.html#h-6.2

[9] Fix | Delete

[10] Fix | Delete

* @return bool True if it is a valid name, false if not.

[11] Fix | Delete

[12] Fix | Delete

function wpcf7_is_name( $text ) {

[13] Fix | Delete

return preg_match( '/^[A-Za-z][-A-Za-z0-9_:.]*$/', $text );

[14] Fix | Delete

}

[15] Fix | Delete

[16] Fix | Delete

[17] Fix | Delete

/**

[18] Fix | Delete

* Checks whether the given text is a well-formed email address.

[19] Fix | Delete

[20] Fix | Delete

function wpcf7_is_email( $text ) {

[21] Fix | Delete

$result = is_email( $text );

[22] Fix | Delete

return apply_filters( 'wpcf7_is_email', $result, $text );

[23] Fix | Delete

}

[24] Fix | Delete

[25] Fix | Delete

[26] Fix | Delete

/**

[27] Fix | Delete

* Checks whether the given text is a well-formed URL.

[28] Fix | Delete

[29] Fix | Delete

function wpcf7_is_url( $text ) {

[30] Fix | Delete

$scheme = wp_parse_url( $text, PHP_URL_SCHEME );

[31] Fix | Delete

$result = $scheme && in_array( $scheme, wp_allowed_protocols(), true );

[32] Fix | Delete

return apply_filters( 'wpcf7_is_url', $result, $text );

[33] Fix | Delete

}

[34] Fix | Delete

[35] Fix | Delete

[36] Fix | Delete

/**

[37] Fix | Delete

* Checks whether the given text is a well-formed telephone number.

[38] Fix | Delete

[39] Fix | Delete

function wpcf7_is_tel( $text ) {

[40] Fix | Delete

$text = preg_replace( '%[()/.*#\s-]+%', '', $text );

[41] Fix | Delete

$result = preg_match( '/^[+]?[0-9]+$/', $text );

[42] Fix | Delete

return apply_filters( 'wpcf7_is_tel', $result, $text );

[43] Fix | Delete

}

[44] Fix | Delete

[45] Fix | Delete

[46] Fix | Delete

/**

[47] Fix | Delete

* Checks whether the given text is a well-formed number.

[48] Fix | Delete

[49] Fix | Delete

* @link https://html.spec.whatwg.org/multipage/input.html#number-state-(type=number)

[50] Fix | Delete

[51] Fix | Delete

function wpcf7_is_number( $text ) {

[52] Fix | Delete

$result = false;

[53] Fix | Delete

[54] Fix | Delete

$patterns = array(

[55] Fix | Delete

'/^[-]?[0-9]+(?:[eE][+-]?[0-9]+)?$/',

[56] Fix | Delete

'/^[-]?(?:[0-9]+)?[.][0-9]+(?:[eE][+-]?[0-9]+)?$/',

[57] Fix | Delete

);

[58] Fix | Delete

[59] Fix | Delete

foreach ( $patterns as $pattern ) {

[60] Fix | Delete

if ( preg_match( $pattern, $text ) ) {

[61] Fix | Delete

$result = true;

[62] Fix | Delete

break;

[63] Fix | Delete

}

[64] Fix | Delete

}

[65] Fix | Delete

[66] Fix | Delete

return apply_filters( 'wpcf7_is_number', $result, $text );

[67] Fix | Delete

}

[68] Fix | Delete

[69] Fix | Delete

[70] Fix | Delete

/**

[71] Fix | Delete

* Checks whether the given text is a valid date.

[72] Fix | Delete

[73] Fix | Delete

* @link https://html.spec.whatwg.org/multipage/input.html#date-state-(type=date)

[74] Fix | Delete

[75] Fix | Delete

function wpcf7_is_date( $text ) {

[76] Fix | Delete

$result = preg_match(

[77] Fix | Delete

'/^([0-9]{4,})-([0-9]{2})-([0-9]{2})$/',

[78] Fix | Delete

$text,

[79] Fix | Delete

$matches

[80] Fix | Delete

);

[81] Fix | Delete

[82] Fix | Delete

if ( $result ) {

[83] Fix | Delete

$result = checkdate( $matches[2], $matches[3], $matches[1] );

[84] Fix | Delete

}

[85] Fix | Delete

[86] Fix | Delete

return apply_filters( 'wpcf7_is_date', $result, $text );

[87] Fix | Delete

}

[88] Fix | Delete

[89] Fix | Delete

[90] Fix | Delete

/**

[91] Fix | Delete

* Checks whether the given text is a valid time.

[92] Fix | Delete

[93] Fix | Delete

* @link https://html.spec.whatwg.org/multipage/input.html#time-state-(type=time)

[94] Fix | Delete

[95] Fix | Delete

function wpcf7_is_time( $text ) {

[96] Fix | Delete

$result = preg_match(

[97] Fix | Delete

'/^([0-9]{2})\:([0-9]{2})(?:\:([0-9]{2}))?$/',

[98] Fix | Delete

$text,

[99] Fix | Delete

$matches

[100] Fix | Delete

);

[101] Fix | Delete

[102] Fix | Delete

if ( $result ) {

[103] Fix | Delete

$hour = (int) $matches[1];

[104] Fix | Delete

$minute = (int) $matches[2];

[105] Fix | Delete

$second = empty( $matches[3] ) ? 0 : (int) $matches[3];

[106] Fix | Delete

[107] Fix | Delete

$result = 0 <= $hour && $hour <= 23 &&

[108] Fix | Delete

0 <= $minute && $minute <= 59 &&

[109] Fix | Delete

0 <= $second && $second <= 59;

[110] Fix | Delete

}

[111] Fix | Delete

[112] Fix | Delete

return apply_filters( 'wpcf7_is_time', $result, $text );

[113] Fix | Delete

}

[114] Fix | Delete

[115] Fix | Delete

[116] Fix | Delete

/**

[117] Fix | Delete

* Checks whether the given text is a well-formed mailbox list.

[118] Fix | Delete

[119] Fix | Delete

* @param string|array $mailbox_list The subject to be checked.

[120] Fix | Delete

* Comma-separated string or an array of mailboxes.

[121] Fix | Delete

* @return array|bool Array of email addresses if all items are well-formed

[122] Fix | Delete

* mailbox, false if not.

[123] Fix | Delete

[124] Fix | Delete

function wpcf7_is_mailbox_list( $mailbox_list ) {

[125] Fix | Delete

if ( ! is_array( $mailbox_list ) ) {

[126] Fix | Delete

$mailbox_text = (string) $mailbox_list;

[127] Fix | Delete

[128] Fix | Delete

$mailbox_text = preg_replace(

[129] Fix | Delete

'/\\\\(?:\"|\')/',

[130] Fix | Delete

'esc-quote',

[131] Fix | Delete

$mailbox_text

[132] Fix | Delete

);

[133] Fix | Delete

[134] Fix | Delete

$mailbox_text = preg_replace(

[135] Fix | Delete

'/(?:\".*?\"|\'.*?\')/',

[136] Fix | Delete

'quoted-string',

[137] Fix | Delete

$mailbox_text

[138] Fix | Delete

);

[139] Fix | Delete

[140] Fix | Delete

$mailbox_list = explode( ',', $mailbox_text );

[141] Fix | Delete

}

[142] Fix | Delete

[143] Fix | Delete

$addresses = array();

[144] Fix | Delete

[145] Fix | Delete

foreach ( $mailbox_list as $mailbox ) {

[146] Fix | Delete

if ( ! is_string( $mailbox ) ) {

[147] Fix | Delete

return false;

[148] Fix | Delete

}

[149] Fix | Delete

[150] Fix | Delete

$mailbox = trim( $mailbox );

[151] Fix | Delete

[152] Fix | Delete

if ( '' === $mailbox ) {

[153] Fix | Delete

continue;

[154] Fix | Delete

}

[155] Fix | Delete

[156] Fix | Delete

if ( preg_match( '/<(.+)>$/', $mailbox, $matches ) ) {

[157] Fix | Delete

$addr_spec = $matches[1];

[158] Fix | Delete

} else {

[159] Fix | Delete

$addr_spec = $mailbox;

[160] Fix | Delete

}

[161] Fix | Delete

[162] Fix | Delete

if ( ! wpcf7_is_email( $addr_spec ) ) {

[163] Fix | Delete

return false;

[164] Fix | Delete

}

[165] Fix | Delete

[166] Fix | Delete

$addresses[] = $addr_spec;

[167] Fix | Delete

}

[168] Fix | Delete

[169] Fix | Delete

return $addresses;

[170] Fix | Delete

}

[171] Fix | Delete

[172] Fix | Delete

[173] Fix | Delete

/**

[174] Fix | Delete

* Checks whether an email address belongs to a domain.

[175] Fix | Delete

[176] Fix | Delete

* @param string $email A mailbox or a comma-separated list of mailboxes.

[177] Fix | Delete

* @param string $domain Internet domain name.

[178] Fix | Delete

* @return bool True if all of the email addresses belong to the domain,

[179] Fix | Delete

* false if not.

[180] Fix | Delete

[181] Fix | Delete

function wpcf7_is_email_in_domain( $email, $domain ) {

[182] Fix | Delete

$email_list = wpcf7_is_mailbox_list( $email );

[183] Fix | Delete

[184] Fix | Delete

if ( false === $email_list ) {

[185] Fix | Delete

return false;

[186] Fix | Delete

}

[187] Fix | Delete

[188] Fix | Delete

$domain = strtolower( $domain );

[189] Fix | Delete

[190] Fix | Delete

foreach ( $email_list as $email ) {

[191] Fix | Delete

$email_domain = substr( $email, strrpos( $email, '@' ) + 1 );

[192] Fix | Delete

$email_domain = strtolower( $email_domain );

[193] Fix | Delete

$domain_parts = explode( '.', $domain );

[194] Fix | Delete

[195] Fix | Delete

do {

[196] Fix | Delete

$site_domain = implode( '.', $domain_parts );

[197] Fix | Delete

[198] Fix | Delete

if ( $site_domain == $email_domain ) {

[199] Fix | Delete

continue 2;

[200] Fix | Delete

}

[201] Fix | Delete

[202] Fix | Delete

array_shift( $domain_parts );

[203] Fix | Delete

} while ( $domain_parts );

[204] Fix | Delete

[205] Fix | Delete

return false;

[206] Fix | Delete

}

[207] Fix | Delete

[208] Fix | Delete

return true;

[209] Fix | Delete

}

[210] Fix | Delete

[211] Fix | Delete

[212] Fix | Delete

/**

[213] Fix | Delete

* Checks whether an email address belongs to the site domain.

[214] Fix | Delete

[215] Fix | Delete

function wpcf7_is_email_in_site_domain( $email ) {

[216] Fix | Delete

if ( wpcf7_is_localhost() ) {

[217] Fix | Delete

return true;

[218] Fix | Delete

}

[219] Fix | Delete

[220] Fix | Delete

$homes = array(

[221] Fix | Delete

home_url(),

[222] Fix | Delete

network_home_url(),

[223] Fix | Delete

);

[224] Fix | Delete

[225] Fix | Delete

$homes = array_unique( $homes );

[226] Fix | Delete

[227] Fix | Delete

foreach ( $homes as $home ) {

[228] Fix | Delete

$sitename = wp_parse_url( $home, PHP_URL_HOST );

[229] Fix | Delete

[230] Fix | Delete

if ( WP_Http::is_ip_address( $sitename ) ) {

[231] Fix | Delete

return true;

[232] Fix | Delete

}

[233] Fix | Delete

[234] Fix | Delete

if ( wpcf7_is_email_in_domain( $email, $sitename ) ) {

[235] Fix | Delete

return true;

[236] Fix | Delete

}

[237] Fix | Delete

}

[238] Fix | Delete

[239] Fix | Delete

return false;

[240] Fix | Delete

}

[241] Fix | Delete

[242] Fix | Delete

[243] Fix | Delete

/**

[244] Fix | Delete

* Verifies that a given file path is under the directories that WordPress

[245] Fix | Delete

* manages for user contents.

[246] Fix | Delete

[247] Fix | Delete

* Returns false if the file at the given path does not exist yet.

[248] Fix | Delete

[249] Fix | Delete

* @param string $path A file path.

[250] Fix | Delete

* @return bool True if the path is under the content directories,

[251] Fix | Delete

* false otherwise.

[252] Fix | Delete

[253] Fix | Delete

function wpcf7_is_file_path_in_content_dir( $path ) {

[254] Fix | Delete

if ( ! is_string( $path ) or '' === $path ) {

[255] Fix | Delete

return false;

[256] Fix | Delete

}

[257] Fix | Delete

[258] Fix | Delete

$callback = static function ( $path, $dir ) {

[259] Fix | Delete

if ( $real_path = realpath( $path ) ) {

[260] Fix | Delete

$path = $real_path;

[261] Fix | Delete

} else {

[262] Fix | Delete

return false;

[263] Fix | Delete

}

[264] Fix | Delete

[265] Fix | Delete

if ( $real_dir = realpath( $dir ) ) {

[266] Fix | Delete

$dir = trailingslashit( $real_dir );

[267] Fix | Delete

} else {

[268] Fix | Delete

return false;

[269] Fix | Delete

}

[270] Fix | Delete

[271] Fix | Delete

return str_starts_with(

[272] Fix | Delete

wp_normalize_path( $path ),

[273] Fix | Delete

wp_normalize_path( $dir )

[274] Fix | Delete

);

[275] Fix | Delete

};

[276] Fix | Delete

[277] Fix | Delete

if (

[278] Fix | Delete

call_user_func( $callback, $path, WP_CONTENT_DIR )

[279] Fix | Delete

) {

[280] Fix | Delete

return true;

[281] Fix | Delete

}

[282] Fix | Delete

[283] Fix | Delete

if (

[284] Fix | Delete

defined( 'UPLOADS' ) and

[285] Fix | Delete

call_user_func( $callback, $path, ABSPATH . UPLOADS )

[286] Fix | Delete

) {

[287] Fix | Delete

return true;

[288] Fix | Delete

}

[289] Fix | Delete

[290] Fix | Delete

if (

[291] Fix | Delete

defined( 'WP_TEMP_DIR' ) and

[292] Fix | Delete

call_user_func( $callback, $path, WP_TEMP_DIR )

[293] Fix | Delete

) {

[294] Fix | Delete

return true;

[295] Fix | Delete

}

[296] Fix | Delete

[297] Fix | Delete

return false;

[298] Fix | Delete

}

[299] Fix | Delete

[300] Fix | Delete