<?php

// $Id: fckeditor.module,v 1.20.2.99 2009/03/11 14:29:55 wwalc Exp $

/**

 * FCKeditor - The text editor for Internet - http://www.fckeditor.net

 * Copyright (C) 2003-2008 Frederico Caldeira Knabben

 *

 * == BEGIN LICENSE ==

 *

 * Licensed under the terms of any of the following licenses at your

 * choice:

 *

 *  - GNU General Public License Version 2 or later (the "GPL")

 *    http://www.gnu.org/licenses/gpl.html

 *

 *  - GNU Lesser General Public License Version 2.1 or later (the "LGPL")

 *    http://www.gnu.org/licenses/lgpl.html

 *

 *  - Mozilla Public License Version 1.1 or later (the "MPL")

 *    http://www.mozilla.org/MPL/MPL-1.1.html

 *

 * == END LICENSE ==

 *

 * @file

 * FCKeditor Module for Drupal 6.x

 *

 * This module allows Drupal to replace textarea fields with FCKeditor.

 *

 * This HTML text editor brings to the web many of the powerful functionalities

 * of known desktop editors like Word. It's really  lightweight and doesn't

 * require any kind of installation on the client computer.

 */

/**

 * The name of simplified toolbar which should be forced

 * Be sure that this toolbar is defined in fckeditor.config.js or fckconfig.js

 */

define('FCKEDITOR_FORCE_SIMPLE_TOOLBAR_NAME', 'DrupalBasic') ;

global $_fckeditor_configuration;

global $_fckeditor_js_ids;

$_fckeditor_configuration = array();

$_fckeditor_js_ids = array();

/**

 * Implementation of hook_help

 */

function fckeditor_help($path, $arg) {

  switch ($path) {

    case 'admin/settings/help#description':

      $output = t("Enables the usage of FCKeditor (WYSIWYG editor) instead of plain text fields.");

      break;

    case 'admin/settings/fckeditor':

      if (!empty($arg[3]) && in_array($arg[3], array("addg", "editg"))) {

        $output = t("<p>The Global Profile allows you to define settings that are common for all profiles. Values defined in other profiles will be appended to the global configuration. This way you can avoid repeating some of the settings that are usually the same in each profile.</p>");

        break;

      }

      else if (!empty($arg[3]) && in_array($arg[3], array("add", "edit"))) {

        $output = t("<p>Note: FCKeditor is highly configurable. The most commonly used features are listed below. If you want to take a look at all available settings, open <code>!fckconfig</code> and then customize <code>!fckeditor_config</code> to your needs. This is also the only way to define new toolbar sets. It is advised to not edit <code>fckconfig.js</code> because you may overwrite it accidentally when you update the editor.</p>", array('!fckconfig' => drupal_get_path('module', 'fckeditor') ."/fckeditor/fckconfig.js", '!fckeditor_config' => drupal_get_path('module', 'fckeditor') ."/fckeditor.config.js"));

        break;

      }

      else if (!empty($arg[3]) && in_array($arg[3], array("delete", "deleteg"))) {

        break;

      }

      $output = t("<p>The FCKeditor module allows Drupal to replace textarea fields with a rich text or <acronym title=\"What You See Is What You Get\">WYSIWYG</acronym> editor. This editor brings many of the powerful functionalities of known desktop editors like Word to the web. It's relatively lightweight and doesn't require any kind of installation on the client computer.</p><p>More information about the editor is located at the !fckeditorlink. A small user guide is located at !userguidelink.</p>",

      array(

      '!fckeditorlink' => l(t('FCKeditor homepage'), 'http://www.fckeditor.net'),

      '!userguidelink' => l(t('FCKeditor userguide'), 'http://docs.fckeditor.net/FCKeditor/Users_Guide'))

      );

      $output .= t('<p>Profiles can be defined based on user roles. A FCKeditor profile can define which pages receive this FCKeditor capability, what buttons or themes are enabled for the editor, how the editor is displayed, and a few other editor functions. It is possible also to define the Global Profile that will hold values that will be appended to all other profiles.</p><p>Lastly, only users with the <code>!access1</code> !permission will be able to use FCKeditor. </p>', array('!permission' => l(t('permission'), 'admin/user/permissions'), '!access1' => t('access fckeditor')));

      break;

    case 'admin/help#fckeditor':

      $output = t("<p>The FCKeditor module allows Drupal to replace textarea fields with a rich text or <acronym title=\"What You See Is What You Get\">WYSIWYG</acronym> editor. This editor brings many of the powerful functionalities of known desktop editors like Word to the web. It's relatively lightweight and doesn't require any kind of installation on the client computer.</p><p>More information is located at the !fckeditorlink. A small user guide is located at !userguidelink.</p>",

      array(

      '!fckeditorlink' => l(t('FCKeditor homepage'), 'http://www.fckeditor.net'),

      '!userguidelink' => l(t('FCKeditor userguide'), 'http://docs.fckeditor.net/FCKeditor/Users_Guide'))

      );

      $output .= t('<h3>Configuration</h3><ol><li>Go to the !fckeditorlink and download the latest version of FCKeditor. Then uncompress the contents of the "fckeditor" directory of the downloaded file to %fckeditordir.</li><li>Enable the module as usual from Drupal\'s admin pages.</li><li>Grant permissions for use of FCKeditor in <code>!path2</code><br />Note: to enable the file browser, read also the <i>How to enable the file browser</i> section.</li><li>Under <code>!path1</code>, adjust the fckeditor profiles. In each profile you can choose which textareas will be replaced by FCKeditor, select default toolbar and configure some more advanced settings.</li><li>For the Rich Text Editing to work you also need to configure your !filterlink for the users that may access Rich Text Editing. Either grant those users Full HTML access or use the following: <br /><code>!filter</code>. </li><li>To have a better control over line breaks, you may disable <code>Line break converter</code> in the chosen filter (recommended).</li><li>Modify the fckeditor.config.js file to custom your needs (optional).<br />You may copy the needed configuration lines from the default FCKeditor configuration settings (!fckconfig), the lines in fckeditor.config.js will override most settings.</li></ol>',

      array(

      '!fckeditorlink' => l(t('FCKeditor homepage'), 'http://www.fckeditor.net/download'),

      '%fckeditordir' => base_path() . drupal_get_path('module', 'fckeditor') .'/fckeditor/',

      '!path1' => l(t('Administer > Site configuration > FCKeditor'), 'admin/settings/fckeditor'),

      '!path2' => l(t('Administer > User Management > Permissions'), 'admin/user/permissions'),

      '!filter' => htmlentities('<a> <p> <span> <div> <h1> <h2> <h3> <h4> <h5> <h6> <img> <map> <area>

      <hr> <br> <br /> <ul> <ol> <li> <dl> <dt> <dd> <table> <tr> <td> <em>

      <b> <u> <i> <strong> <font> <del> <ins> <sub> <sup> <quote> <blockquote>

      <pre> <address> <code> <cite> <embed> <object> <param> <strike> <caption>'),

      '!fckconfig' => base_path() . drupal_get_path('module', 'fckeditor') .'/fckeditor/fckconfig.js',

      '!moduledir' => base_path() . drupal_get_path('module', 'fckeditor') .'/fckeditor',

      '!filterlink' => l(t('filters'), 'admin/settings/filters'))

      );

      $output .= t('<h3>Installation troubleshooting</h3><p>If your FCKeditor does not show you must check if all files are extracted correctly. The directory %fckeditordir should have the following files: <code>fckeditor.js, fckconfig.js, fckstyles.xml, fcktemplates.xml</code> and a directory named <code>editor</code>.</p>',

      array(

      '%fckeditordir' => base_path() . drupal_get_path('module', 'fckeditor') .'/fckeditor/')

      );

      $output .= t('The correct directory structure is as follows: <blockquote><pre>!structure</pre></blockquote>', array(

      '!structure' => "modules\n   fckeditor\n      <em>fckeditor.module</em>\n      fckeditor\n         _samples\n         editor\n         <em>COPY_HERE.txt</em>\n         <em>fckconfig.js</em>\n         ..."

      ));

      $output .= t("<h3>Plugins: Teaser break and Pagebreak</h3><p>By default, FCKeditor module comes with two plugins that can handle teaser break (&lt;!--break--&gt;) and pagebreak (&lt;!--pagebreak--&gt;). You can enable any (or even both) of them.<ol><li>Open <code>!fckeditor.config.js</code> and uncomment these three lines: <pre>!code</pre></li><li>The second step is to add buttons to the toolbar (in the same file). The button names are: <code>DrupalBreak, DrupalPageBreak</code>. For example if you have a toolbar with an array of buttons defined as follows: <pre>!buttons1</pre> simply add those two buttons at the end of array: <pre>!buttons2</pre> (remember about single quotes).</li><li>Note that the &lt;--pagebreak--&gt; tag is not supported by default in Drupal. You should install the <a href=\"!paging\" target=\"_blank\">Paging</a> module to enable the &lt;!--pagebreak--&gt; tag support. Please refer to the Paging module documentation for detailed installation instructions.</li></ol></p>",

      array(

      '!fckeditor.config.js' => base_path() . drupal_get_path('module', 'fckeditor') .'/fckeditor.config.js',

      '!code' => "

      FCKConfig.PluginsPath = '../../plugins/' ;

      FCKConfig.Plugins.Add( 'drupalbreak' ) ;

      FCKConfig.Plugins.Add( 'drupalpagebreak' ) ;

      ",

      "!paging" => "http://drupal.org/project/paging",

      '!buttons1' => "['Image','Flash','Table','Rule','SpecialChar']",

      '!buttons2' => "['Image','Flash','Table','Rule','SpecialChar', 'DrupalBreak', 'DrupalPageBreak']",

      ));

      $output .= t('<h3>Uploading images and files</h3><p>There are three ways of uploading files: by using the built-in file browser, by using modules like !imce, !ib, !webfm or by using the core upload module.</p>',

      array(

      '!imce' => l(t('IMCE'), 'http://drupal.org/project/imce'),

      '!ib' => l(t('Image Browser'), 'http://drupal.org/project/imagebrowser'),

      '!webfm' => l(t('Web File Manager'), 'http://drupal.org/project/webfm'),

      )

      );

      // the rest is untranslated for the moment

      $output .= t("<h3>How to enable the file browser</h3><p>The editor gives the end user the flexibility to create a custom file browser that can be integrated on it. The included file browser allows users to view the content of a specific directory on the server and add new content to that directory (create folders and upload files).</p><p><ol><li>To enable file browsing you need to edit the connector configuration file in your fckeditor module directory, the file should be in:<blockquote><code>!config3</code> <br /> (FCKeditor 2.5+)<br /><br /> or <br /><br /><code>!config1</code><br /> and <br /><code>!config2</code> <br /> (FCKeditor 2.3.x - 2.4.x)</blockquote></p><p>In this file(s) you will need to enable the file browser by adding one line that includes file with the special authentication function for Drupal (<code>filemanager.config.php</code>). Add this code: <blockquote><code>!code1</code><br /> (FCKeditor 2.5+)</blockquote> or <blockquote><code>!code2</code> <br /> (FCKeditor 2.3.x - 2.4.x)</blockquote> straight below this line: <blockquote><code>!code3</code></blockquote> The config.php file also holds some other important settings, please take a look at it and adjust it to your needs (optional).</p></li>",

      array('!config1' => base_path() . drupal_get_path('module', 'fckeditor') ."/fckeditor/editor/filemanager/browser/default/connectors/php/config.php",

      '!config2' => base_path() . drupal_get_path('module', 'fckeditor') ."/fckeditor/editor/filemanager/upload/php/config.php",

      '!config3' => base_path() . drupal_get_path('module', 'fckeditor') ."/fckeditor/editor/filemanager/connectors/php/config.php",

      '!filesdir' => file_directory_path(),

      '!code1' => 'require_once "../../../../../filemanager.config.php";', //2.5

      '!code2' => 'require_once "'. str_replace("\\", "\\\\", dirname(__FILE__) . DIRECTORY_SEPARATOR .'filemanager.config.php"'), //2.4

      '!code3' => "\$Config['UserFilesAbsolutePath'] = '' ;",

      )

      );

      $output .= t("<li>As of Drupal 5.2, additional step is required: locate file named <code>settings.php</code> inside your drupal directory (usually <code>sites/default/settings.php</code>) and set <strong><code>&#36;cookie_domain</code></strong> variable to the appropiate domain (remember to uncomment that line). If you not do this, FCKeditor will claim that file browser is disabled</li>");

      $output .= t('<li>Enabling file uploads is <strong>a security risk</strong>. That\'s why you have to grant a !link to enable the file browser to certain groups (assign the &quot;!allowupload&quot; permissions).</li>', array('!link' => l(t('separate permission'), 'admin/user/permissions'), "!allowupload" => t("allow fckeditor file uploads")));

      $output .= t('<li>Lastly, adjust the !fb for each !profile.</li></ol>', array('!fb' => t('File browser settings'), '!profile' => l(t('profile'), 'admin/settings/fckeditor')));

      $output .= t("<h3>Modules: Image Assist</h3><p>Image Assist can be integrated with FCKeditor. To do this, simply copy the <code>!iaf1</code> file to <code>!iaf2</code>.</p>", array("!iaf1" => drupal_get_path('module', 'fckeditor') ."/img_assist_fckeditor.js", "!iaf2" => drupal_get_path('module', 'img_assist') ."/img_assist_fckeditor.js"));

      break;

  }

  return !empty($output) ? $output : "";

}

/**

 * Implementation of hook_perm

 * Administer -> User management -> Permissions

 */

function fckeditor_perm() {

  return array('administer fckeditor', 'access fckeditor', 'allow fckeditor file uploads');

}

/**

 * Implementation of textarea

 * Replace textarea with FCKeditor using callback function (fckeditor_process_textarea)

 */

function fckeditor_elements() {

  $type = array();

  $type['textfield'] = array(

    '#process' => array(

    'fckeditor_process_input'

  ),

  );

  if (user_access('access fckeditor')) {

    // only roles with permission get the fckeditor

    if (fckeditor_is_compatible_client()) {

      // it would be useless to dig deeper if we're not able or allowed to

      $type['textarea'] = array('#process' => array('fckeditor_process_textarea'));

      $type['form'] = array('#after_build' => array('fckeditor_process_form'));

    }

  }

  return $type;

}

function fckeditor_process_form(&$form) {

  global $_fckeditor_configuration, $_fckeditor_js_ids;

  static $processed_textareas = array();

  static $found_textareas = array();

  //Skip if:

  // - we're not editing an element

  // - fckeditor is not enabled (configuration is empty)

  if (arg(1) == "add" || arg(1) == "reply" || !count($_fckeditor_configuration)) {

    return $form;

  }

  $fckeditor_filters = array();

  // Iterate over element children; resetting array keys to access last index.

  if ($children = array_values(element_children($form))) {

    foreach ($children as $index => $item) {

      $element = &$form[$item];

      if (isset($element['#id']) && in_array($element['#id'], array_keys($_fckeditor_js_ids))) {

        $found_textareas[$element['#id']] = &$element;

      }

      // filter_form() always uses the key 'format'. We need a type-agnostic

      // match to prevent false positives. Also, there must have been at least

      // one element on this level.

      if ($item === 'format' && $index > 0) {

        // Make sure we either match a input format selector or input format

        // guidelines (displayed if user has access to one input format only).

        if ((isset($element['#type']) && $element['#type'] == 'fieldset') || isset($element['format']['guidelines'])) {

          // The element before this element is the target form field.

          $field = &$form[$children[$index - 1]];

          $textarea_id = $field['#id'];

          $js_id = $_fckeditor_js_ids[$textarea_id];

          array_push($processed_textareas, $js_id);

          //search for checkxss1/2 class

          if (empty($field['#attributes']['class']) || strpos($field['#attributes']['class'], "checkxss") === FALSE) {

            continue;

          }

          // Determine the available input formats. The last child element is a

          // link to "More information about formatting options". When only one

          // input format is displayed, we also have to remove formatting

          // guidelines, stored in the child 'format'.

          $formats = element_children($element);

          foreach ($formats as $format_id) {

            $format = !empty($element[$format_id]['#default_value']) ? $element[$format_id]['#default_value'] : $element[$format_id]['#value'];

            break;

          }

          $enabled = filter_list_format($format);

          $fckeditor_filters = array();

          //loop through all enabled filters

          foreach ($enabled as $id => $filter) {

            //but use only that one selected in FCKeditor profile

            if (in_array($id, array_keys($_fckeditor_configuration[$textarea_id]['filters']))) {

              if (!isset($fckeditor_filters[$js_id])) {

                $fckeditor_filters[$js_id] = array();

              }

              $fckeditor_filters[$js_id][] = $id ."/". $format;

            }

          }

          //No filters assigned, remove xss class

          if (empty($fckeditor_filters[$js_id])) {

            $field['#attributes']['class'] = preg_replace("/checkxss(1|2)/", "", $field['#attributes']['class']);

          }

          else {

            $field['#attributes']['class'] = strtr($field['#attributes']['class'], array("checkxss1" => "filterxss1", "checkxss2" => "filterxss2"));

          }

          array_pop($formats);

          unset($formats['format']);

        }

        // If this element is 'format', do not recurse further.

        continue;

      }

      // Recurse into children.

      fckeditor_process_form($element);

    }

  }

  //We're in a form

  if (isset($form['#action'])) {

    //some textareas associated with FCKeditor has not been processed

    if (count($processed_textareas) < count($_fckeditor_js_ids)) {

      //loop through all found textfields

      foreach (array_keys($found_textareas) as $id) {

        $element = &$found_textareas[$id];

        //if not processed yet (checkxss class is before final processing)

        if (strpos($element['#attributes']['class'], "checkxss") !== FALSE && !in_array($_fckeditor_js_ids[$element['#id']], $processed_textareas) && !empty($_fckeditor_configuration[$id]['filters'])) {

          //assign default Filtered HTML to be safe on fields that do not have input format assigned, but only if at least one security filter is enabled in Security settings

          $js_id = $_fckeditor_js_ids[$element['#id']];

          $fckeditor_filters[$js_id][] = "filter/0/1";

          $element['#attributes']['class'] = strtr($element['#attributes']['class'], array("checkxss1" => "filterxss1", "checkxss2" => "filterxss2"));

        }

      }

    }

  }

  if (!empty($fckeditor_filters)) {

    drupal_add_js(array('fckeditor_filters' => $fckeditor_filters), 'setting');

  }

  return $form;

}

/**

 * Allow more than 255 chars in Allowed HTML tags textfield

 *

 */

function fckeditor_process_input($element) {

  if ($element['#id']=='edit-allowed-html-1') {

    $element['#maxlength'] = max($element['#maxlength'], 1024);

  }

  return $element;

}

/**

 * Add link to FCKeditor configuration in "Administer ->  Site configuration" section

 *

 */

function fckeditor_menu() {

  $items = array();

  $items['fckeditor/xss'] = array(

    'title' => 'XSS Filter',

    'description' => 'XSS Filter.',

    'page callback' => 'fckeditor_filter_xss',

    'access arguments' => array('access fckeditor'),

    'type' => MENU_CALLBACK,

  );

  $items['admin/settings/fckeditor'] = array(

  'title' => 'FCKeditor',

  'description' => 'Configure the rich editor.',

  'page callback' => 'fckeditor_admin',

  'access arguments' => array('administer fckeditor'),

  'type' => MENU_NORMAL_ITEM,

  );

  return $items;

}

/**

 * AJAX callback - XSS filter

 */

function fckeditor_filter_xss() {

  $GLOBALS['devel_shutdown'] = FALSE;

  if (!isset($_POST['text']) || !is_string($_POST['text']) || !is_array($_POST['filters'])) {

    exit;

  }

  $text = $_POST['text'];

  $text = strtr($text, array('<!--' => '__COMMENT__START__', '-->' => '__COMMENT__END__'));

  foreach ($_POST['filters'] as $module_delta) {

    $module = strtok($module_delta, "/");

    $delta = strtok("/");

    $format = strtok("/");

    if (!module_hook($module, 'filter')) {

      continue;

    }

    //built-in filter module, a special case where we would like to strip XSS and nothing more

    if ($module == 'filter' && $delta == 0) {

      preg_match_all("|</?([a-z][a-z0-9]*)(?:\b[^>]*)>|i", $text, $matches);

      if ($matches[1]) {

        $tags = array_unique($matches[1]);

        $text = filter_xss($text, $tags);

      }

    }

    else {

      $text = module_invoke($module, 'filter', 'process', $delta, $format, $text);

    }

  }

  $text = strtr($text, array('__COMMENT__START__' => '<!--', '__COMMENT__END__' => '-->'));

  echo $text;

  exit;

}

//Remove a profile from the database.

function fckeditor_profile_delete($name) {

  db_query("DELETE FROM {fckeditor_settings} WHERE name = '%s'", $name);

  db_query("DELETE FROM {fckeditor_role} WHERE name = '%s'", $name);

}

/**

 * Profile validation.

 */

function fckeditor_profile_validate($edit) {

  $errors = array();

  //include mode and all other fields are empty, invalid

  if ($edit['excl_mode'] == 1 && !$edit['excl_fields'] && !$edit['excl_paths']) {

    $errors['excl_mode'] = t('Include mode selected, but no fields/paths given. Enter at least one path or field where FCKeditor should appear.');

  }

  if (!preg_match("/^\d+$/", trim($edit['min_rows']))) {

    $errors['min_rows'] = t('Minimum rows must be a valid number');

  }

  if ($edit['default'] == 't' && $edit['popup'] == 't') {

    $errors['popup'] = t('If FCKeditor is enabled by default, popup window must be disabled.');

  }

  if ($edit['show_toggle'] == 't' && $edit['popup'] == 't') {

    $errors['popup'] = t('If toggle is enabled, popup window must be disabled.');

  }

  if (!$edit['name']) {

    $errors['name'] = t('You must give a profile name.');

  }

  if (!preg_match("/^\d+%?$/", $edit['width'])) {

    $errors['width'] = t('Enter valid width. Ex: 400 or 100%');

  }

  if (!empty($edit['css_path'])) {

    if ($edit['css_mode'] != 'self') {

      $errors['css_path'] = t('CSS path is not empty. Please set the "Editor CSS" option to "define css" mode.');

    }

    else if (false !== strpos($edit['css_path'], '"')) {

      $errors['css_path'] = t('Double quotes are not allowed in CSS path.');

    }

    else if (substr($edit['css_path'], 0, 1) == "'" && substr($edit['css_path'], -1) == "'") {

      $errors['css_path'] = t('Enter valid path, do not surround it with quotes.');

    }

  }

  if (!empty($edit['styles_path'])) {

    if ($edit['css_style'] != 'self') {

      $errors['styles_path'] = t('Path to predefined styles is not empty. Please set the "Predefined styles" option to "define path to fckstyles.xml" mode.');

    }

    else if (false !== strpos($edit['styles_path'], '"')) {

      $errors['styles_path'] = t('Double quotes are not allowed in path.');

    }

    else if (substr($edit['styles_path'], 0, 1) == "'" && substr($edit['styles_path'], -1) == "'") {

      $errors['styles_path'] = t('Enter valid path, do not surround it with quotes.');

    }

  }

  if (!empty($edit['font_format'])) {

    if (!preg_match("/^((p|div|pre|address|h1|h2|h3|h4|h5|h6);)*(p|div|pre|address|h1|h2|h3|h4|h5|h6)$/", $edit['font_format'])) {

      $errors['font_format'] = t('Enter valid, semicolon separated, list of HTML font formats (no semicolon at the end of list expected).');

    }

  }

  //validate fields

  $fields = preg_split("/[\s,]+/", strip_tags($edit['excl_fields']));

  foreach ($fields as $field) {

    if ($field && !preg_match("/^[a-z]+(\-{1,2}[[:alnum:]]+|\\*|\-\\*)+$/i", $field)) {

      $errors['excl_fields'] = t("Invalid field specified: %1", array("%1" => $field));

      break;

    }

  }

  $fields = preg_split("/[\s,]+/", strip_tags($edit['simple_incl_fields']));

  foreach ($fields as $field) {

    if ($field && !preg_match("/^[a-z]+(\-{1,2}[[:alnum:]]+|\\*|\-\\*)+$/i", $field)) {

      $errors['simple_incl_fields'] = t("Invalid field specified: %1", array("%1" => $field));

      break;

    }

  }

  //validate paths

  $paths = preg_split("/[\s,]+/", strip_tags($edit['excl_paths']));

  foreach ($paths as $path) {

    if ($path && !preg_match("|^[_a-z0-9-\*/]*$|i", $path)) {

      $errors['excl_paths'] = t("Invalid path specified: %1", array("%1" => $path));

      break;

    }

  }

  $paths = preg_split("/[\s,]+/", strip_tags($edit['simple_incl_paths']));

  foreach ($paths as $path) {

    if ($path && !preg_match("|^[_a-z0-9-\*/]*$|i", $path)) {

      $errors['simple_incl_paths'] = t("Invalid path specified: %1", array("%1" => $path));

      break;

    }

  }

  if (variable_get('file_downloads', '') !== FILE_DOWNLOADS_PRIVATE) {

    if (!empty($edit['UserFilesAbsolutePath']) && empty($edit['UserFilesPath'])) {

      $errors['UserFilesPath'] = t("Path to uploaded files is required.");

    }

    if (!empty($edit['UserFilesPath']) && empty($edit['UserFilesAbsolutePath'])) {

      $errors['UserFilesPath'] = t("Absolute path to uploaded files is required.");

    }

  }

  foreach ($errors as $name => $message) {

    form_set_error($name, $message);

  }

  return count($errors) == 0;

}

/**

 * Global profile validation.

 */

function fckeditor_global_profile_validate($edit) {

  $errors = array();

  //include mode and all other fields are empty, invalid

  if ($edit['excl_mode'] == 1 && !$edit['excl_fields'] && !$edit['excl_paths']) {

    $errors['excl_mode'] = t('Include mode selected, but no fields/paths given. Enter at least one path or field where FCKeditor should appear.');

  }

  //validate fields

  $fields = preg_split("/[\s,]+/", strip_tags($edit['excl_fields']));

  foreach ($fields as $field) {

    if ($field && !preg_match("/^[a-z]+(\-{1,2}[[:alnum:]]+|\\*|\-\\*)+$/i", $field)) {

      $errors['excl_fields'] = t("Invalid field specified: %1", array("%1" => $field));

      break;

    }

  }

  $fields = preg_split("/[\s,]+/", strip_tags($edit['simple_incl_fields']));

  foreach ($fields as $field) {

    if ($field && !preg_match("/^[a-z]+(\-{1,2}[[:alnum:]]+|\\*|\-\\*)+$/i", $field)) {

      $errors['simple_incl_fields'] = t("Invalid field specified: %1", array("%1" => $field));

      break;

    }

  }

  //validate paths

  $paths = preg_split("/[\s,]+/", strip_tags($edit['excl_paths']));

  foreach ($paths as $path) {

    if ($path && !preg_match("|^[_a-z0-9-\*/]*$|i", $path)) {

      $errors['excl_paths'] = t("Invalid path specified: %1", array("%1" => $path));

      break;

    }

  }

  $paths = preg_split("/[\s,]+/", strip_tags($edit['simple_incl_paths']));

  foreach ($paths as $path) {

    if ($path && !preg_match("|^[_a-z0-9-\*/]*$|i", $path)) {

      $errors['simple_incl_paths'] = t("Invalid path specified: %1", array("%1" => $path));

      break;

    }

  }

  foreach ($errors as $name => $message) {

    form_set_error($name, $message);

  }

  return count($errors) == 0;

}