<?php

/**

 * Press This Display and Handler.

 *

 * @package WordPress

 * @subpackage Press_This

 */

/** WordPress Administration Bootstrap */

require_once('admin.php');

header('Content-Type: ' . get_option('html_type') . '; charset=' . get_option('blog_charset'));

if ( ! current_user_can('edit_posts') )

	wp_die( __( 'Cheatin’ uh?' ) );

/**

 * Convert characters.

 *

 * @package WordPress

 * @subpackage Press_This

 * @since 2.6.0

 *

 * @param string $text

 * @return string

 */

function aposfix($text) {

	$translation_table[chr(34)] = '"';

	$translation_table[chr(38)] = '&';

	$translation_table[chr(39)] = ''';

	return preg_replace("/&(?![A-Za-z]{0,4}\w{2,3};|#[0-9]{2,3};)/","&" , strtr($text, $translation_table));

}

/**

 * Press It form handler.

 *

 * @package WordPress

 * @subpackage Press_This

 * @since 2.6.0

 *

 * @return int Post ID

 */

function press_it() {

	// define some basic variables

	$quick['post_status'] = 'draft'; // set as draft first

	$quick['post_category'] = isset($_POST['post_category']) ? $_POST['post_category'] : null;

	$quick['tax_input'] = isset($_POST['tax_input']) ? $_POST['tax_input'] : null;

	$quick['post_title'] = ( trim($_POST['title']) != '' ) ? $_POST['title'] : '  ';

	$quick['post_content'] = isset($_POST['post_content']) ? $_POST['post_content'] : ''; 

	// insert the post with nothing in it, to get an ID

	$post_ID = wp_insert_post($quick, true);

	if ( is_wp_error($post_ID) )

		wp_die($post_ID);

	$content = isset($_POST['content']) ? $_POST['content'] : '';

	$upload = false;

	if( !empty($_POST['photo_src']) && current_user_can('upload_files') ) {

		foreach( (array) $_POST['photo_src'] as $key => $image) {

			// see if files exist in content - we don't want to upload non-used selected files.

			if ( strpos($_POST['content'], htmlspecialchars($image)) !== false ) {

				$desc = isset($_POST['photo_description'][$key]) ? $_POST['photo_description'][$key] : '';

				$upload = media_sideload_image($image, $post_ID, $desc);

				// Replace the POSTED content <img> with correct uploaded ones. Regex contains fix for Magic Quotes

				if( !is_wp_error($upload) )

					$content = preg_replace('/<img ([^>]*)src=\\\?(\"|\')'.preg_quote(htmlspecialchars($image), '/').'\\\?(\2)([^>\/]*)\/*>/is', $upload, $content);

			}

		}

	}

	// set the post_content and status

	$quick['post_status'] = isset($_POST['publish']) ? 'publish' : 'draft';

	$quick['post_content'] = $content;

	// error handling for media_sideload

	if ( is_wp_error($upload) ) {

		wp_delete_post($post_ID);

		wp_die($upload);

	} else {

		$quick['ID'] = $post_ID;

		wp_update_post($quick);

	}

	return $post_ID;

}

// For submitted posts.

if ( isset($_REQUEST['action']) && 'post' == $_REQUEST['action'] ) {

	check_admin_referer('press-this');

	$post_ID = press_it();

	$posted =  $post_ID;

} else {

	$post_ID = 0;

}

// Set Variables

$title = isset( $_GET['t'] ) ? trim( strip_tags( aposfix( stripslashes( $_GET['t'] ) ) ) ) : '';

$selection = isset( $_GET['s'] ) ? trim( htmlspecialchars( html_entity_decode( aposfix( stripslashes( $_GET['s'] ) ) ) ) ) : '';

if ( ! empty($selection) ) {

	$selection = preg_replace('/(\r?\n|\r)/', '</p><p>', $selection);

	$selection = '<p>'.str_replace('<p></p>', '', $selection).'</p>';

}

$url = isset($_GET['u']) ? esc_url($_GET['u']) : '';

$image = isset($_GET['i']) ? $_GET['i'] : '';

if ( !empty($_REQUEST['ajax']) ) {

	switch ($_REQUEST['ajax']) {

		case 'video': ?>

			<script type="text/javascript" charset="utf-8">

			/* <![CDATA[ */

				jQuery('.select').click(function() {

					append_editor(jQuery('#embed-code').val());

					jQuery('#extra-fields').hide();

					jQuery('#extra-fields').html('');

				});

				jQuery('.close').click(function() {

					jQuery('#extra-fields').hide();

					jQuery('#extra-fields').html('');

				});

			/* ]]> */

			</script>

			<div class="postbox">

				<h2><label for="embed-code"><?php _e('Embed Code') ?></label></h2>

				<div class="inside">

					<textarea name="embed-code" id="embed-code" rows="8" cols="40"><?php echo wp_htmledit_pre( $selection ); ?></textarea>

					<p id="options"><a href="#" class="select button"><?php _e('Insert Video'); ?></a> <a href="#" class="close button"><?php _e('Cancel'); ?></a></p>

				</div>

			</div>

			<?php break;

		case 'photo_thickbox': ?>

			<script type="text/javascript" charset="utf-8">

				/* <![CDATA[ */

				jQuery('.cancel').click(function() {

					tb_remove();

				});

				jQuery('.select').click(function() {

					image_selector();

				});

				/* ]]> */

			</script>

			<h3 class="tb"><label for="this_photo_description"><?php _e('Description') ?></label></h3>

			<div class="titlediv">

				<div class="titlewrap">

					<input id="this_photo_description" name="photo_description" class="tbtitle text" onkeypress="if(event.keyCode==13) image_selector();" value="<?php echo esc_attr($title);?>"/>

				</div>

			</div>

			<p class="centered">

				<input type="hidden" name="this_photo" value="<?php echo esc_attr($image); ?>" id="this_photo" />

				<a href="#" class="select">

					<img src="<?php echo esc_url($image); ?>" alt="<?php echo esc_attr(__('Click to insert.')); ?>" title="<?php echo esc_attr(__('Click to insert.')); ?>" />

				</a>

			</p>

			<p id="options"><a href="#" class="select button"><?php _e('Insert Image'); ?></a> <a href="#" class="cancel button"><?php _e('Cancel'); ?></a></p>

			<?php break;

		case 'photo_thickbox_url': ?>

			<script type="text/javascript" charset="utf-8">

				/* <![CDATA[ */

				jQuery('.cancel').click(function() {

					tb_remove();

				});

				jQuery('.select').click(function() {

					image_selector();

				});

				/* ]]> */

			</script>

			<h3 class="tb"><label for="this_photo"><?php _e('URL') ?></label></h3>

			<div class="titlediv">

				<div class="titlewrap">

					<input id="this_photo" name="this_photo" class="tbtitle text" onkeypress="if(event.keyCode==13) image_selector();" />

				</div>

			</div>

			<h3 class="tb"><label for="photo_description"><?php _e('Description') ?></label></h3>

			<div id="titlediv">

				<div class="titlewrap">

					<input id="this_photo_description" name="photo_description" class="tbtitle text" onkeypress="if(event.keyCode==13) image_selector();" value="<?php echo esc_attr($title);?>"/>

				</div>

			</div>

			<p id="options"><a href="#" class="select"><?php _e('Insert Image'); ?></a> | <a href="#" class="cancel"><?php _e('Cancel'); ?></a></p>

			<?php break;

	case 'photo_images':

		/**

		 * Retrieve all image URLs from given URI.

		 *

		 * @package WordPress

		 * @subpackage Press_This

		 * @since 2.6.0

		 *

		 * @param string $uri

		 * @return string

		 */

		function get_images_from_uri($uri) {

			$uri = preg_replace('/\/#.+?$/','', $uri);

			if( preg_match('/\.(jpg|jpe|jpeg|png|gif)$/', $uri) && !strpos($uri,'blogger.com') )

				return "'" . esc_attr( html_entity_decode($uri) ) . "'";

			$content = wp_remote_fopen($uri);

			if ( false === $content )

				return '';

			$host = parse_url($uri);

			$pattern = '/<img ([^>]*)src=(\"|\')([^<>\'\"]+)(\2)([^>]*)\/*>/i';

			$content = str_replace(array("\n","\t","\r"), '', $content);

			preg_match_all($pattern, $content, $matches);

			if ( empty($matches[0]) )

				return '';

			$sources = array();

			foreach ($matches[3] as $src) {

				// if no http in url

				if(strpos($src, 'http') === false)

					// if it doesn't have a relative uri

					if( strpos($src, '../') === false && strpos($src, './') === false && strpos($src, '/') === 0)

						$src = 'http://'.str_replace('//','/', $host['host'].'/'.$src);

					else

						$src = 'http://'.str_replace('//','/', $host['host'].'/'.dirname($host['path']).'/'.$src);

				$sources[] = esc_attr($src);

			}

			return "'" . implode("','", $sources) . "'";

		}

		$url = wp_kses(urldecode($url), null);

		echo 'new Array('.get_images_from_uri($url).')';

		break;

	case 'photo_js': ?>

		// gather images and load some default JS

		var last = null

		var img, img_tag, aspect, w, h, skip, i, strtoappend = "";

		if(photostorage == false) {

		var my_src = eval(

			jQuery.ajax({

		   		type: "GET",

		   		url: "<?php echo esc_url($_SERVER['PHP_SELF']); ?>",

				cache : false,

				async : false,

		   		data: "ajax=photo_images&u=<?php echo urlencode($url); ?>",

				dataType : "script"

			}).responseText

		);

		if(my_src.length == 0) {

			var my_src = eval(

				jQuery.ajax({

		   			type: "GET",

		   			url: "<?php echo esc_url($_SERVER['PHP_SELF']); ?>",

					cache : false,

					async : false,

		   			data: "ajax=photo_images&u=<?php echo urlencode($url); ?>",

					dataType : "script"

				}).responseText

			);

			if(my_src.length == 0) {

				strtoappend = '<?php _e('Unable to retrieve images or no images on page.'); ?>';

			}

		}

		}

		for (i = 0; i < my_src.length; i++) {

			img = new Image();

			img.src = my_src[i];

			img_attr = 'id="img' + i + '"';

			skip = false;

			maybeappend = '<a href="?ajax=photo_thickbox&amp;i=' + encodeURIComponent(img.src) + '&amp;u=<?php echo urlencode($url); ?>&amp;height=400&amp;width=500" title="" class="thickbox"><img src="' + img.src + '" ' + img_attr + '/></a>';

			if (img.width && img.height) {

				if (img.width >= 30 && img.height >= 30) {

					aspect = img.width / img.height;

					scale = (aspect > 1) ? (71 / img.width) : (71 / img.height);

					w = img.width;

					h = img.height;

					if (scale < 1) {

						w = parseInt(img.width * scale);

						h = parseInt(img.height * scale);

					}

					img_attr += ' style="width: ' + w + 'px; height: ' + h + 'px;"';

					strtoappend += maybeappend;

				}

			} else {

				strtoappend += maybeappend;

			}

		}

		function pick(img, desc) {

			if (img) {

				if('object' == typeof jQuery('.photolist input') && jQuery('.photolist input').length != 0) length = jQuery('.photolist input').length;

				if(length == 0) length = 1;

				jQuery('.photolist').append('<input name="photo_src[' + length + ']" value="' + img +'" type="hidden"/>');

				jQuery('.photolist').append('<input name="photo_description[' + length + ']" value="' + desc +'" type="hidden"/>');

				insert_editor( "\n\n" + encodeURI('<p style="text-align: center;"><a href="<?php echo $url; ?>"><img src="' + img +'" alt="' + desc + '" /></a></p>'));

			}

			return false;

		}

		function image_selector() {

			tb_remove();

			desc = jQuery('#this_photo_description').val();

			src = jQuery('#this_photo').val();

			pick(src, desc);

			jQuery('#extra-fields').hide();

			jQuery('#extra-fields').html('');

			return false;

		}

			jQuery('#extra-fields').html('<div class="postbox"><h2>Add Photos <small id="photo_directions">(<?php _e("click images to select") ?>)</small></h2><ul class="actions"><li><a href="#" id="photo-add-url" class="thickbox button"><?php _e("Add from URL") ?> +</a></li></ul><div class="inside"><div class="titlewrap"><div id="img_container"></div></div><p id="options"><a href="#" class="close button"><?php _e('Cancel'); ?></a><a href="#" class="refresh button"><?php _e('Refresh'); ?></a></p></div>');

			jQuery('#img_container').html(strtoappend);

		<?php break;

}

die;

}

?>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" <?php do_action('admin_xml_ns'); ?> <?php language_attributes(); ?>>

<head>

	<meta http-equiv="Content-Type" content="<?php bloginfo('html_type'); ?>; charset=<?php echo get_option('blog_charset'); ?>" />

	<title><?php _e('Press This') ?></title>

<?php

	add_thickbox();

	wp_enqueue_style( 'press-this' );

	wp_enqueue_style( 'press-this-ie');

	wp_enqueue_style( 'colors' );

	wp_enqueue_script( 'post' );

	wp_enqueue_script( 'editor' );

?>

<script type="text/javascript">

//<![CDATA[

addLoadEvent = function(func){if(typeof jQuery!="undefined")jQuery(document).ready(func);else if(typeof wpOnload!='function'){wpOnload=func;}else{var oldonload=wpOnload;wpOnload=function(){oldonload();func();}}};

var userSettings = {'url':'<?php echo SITECOOKIEPATH; ?>','uid':'<?php if ( ! isset($current_user) ) $current_user = wp_get_current_user(); echo $current_user->ID; ?>','time':'<?php echo time() ?>'};

var ajaxurl = '<?php echo admin_url('admin-ajax.php'); ?>', pagenow = 'press-this';

var photostorage = false;

//]]>

</script>

<?php

	do_action('admin_print_styles');

	do_action('admin_print_scripts');

	do_action('admin_head');

	if ( user_can_richedit() )

		wp_tiny_mce( true, array( 'height' => '370' ) );

?>

	<script type="text/javascript">

	function insert_plain_editor(text) {

		edCanvas = document.getElementById('content');

		edInsertContent(edCanvas, text);

	}

	function set_editor(text) {

		if ( '' == text || '<p></p>' == text ) text = '<p><br /></p>';

		if ( tinyMCE.activeEditor ) tinyMCE.execCommand('mceSetContent', false, text);

	}

	function insert_editor(text) {

		if ( '' != text && tinyMCE.activeEditor && ! tinyMCE.activeEditor.isHidden()) {

			tinyMCE.execCommand('mceInsertContent', false, '<p>' + decodeURI(tinymce.DOM.decode(text)) + '</p>', {format : 'raw'});

		} else {

			insert_plain_editor(decodeURI(text));

		}

	}

	function append_editor(text) {

		if ( '' != text && tinyMCE.activeEditor && ! tinyMCE.activeEditor.isHidden()) {

			tinyMCE.execCommand('mceSetContent', false, tinyMCE.activeEditor.getContent({format : 'raw'}) + '<p>' + text + '</p>');

			tinyMCE.execCommand('mceCleanup');

		} else {

			insert_plain_editor(text);

		}

	}

	function show(tab_name) {

		jQuery('#extra-fields').html('');

		switch(tab_name) {

			case 'video' :

				jQuery('#extra-fields').load('<?php echo esc_url($_SERVER['PHP_SELF']); ?>', { ajax: 'video', s: '<?php echo esc_attr($selection); ?>'}, function() {

					<?php

					$content = '';

					if ( preg_match("/youtube\.com\/watch/i", $url) ) {

						list($domain, $video_id) = split("v=", $url);

						$video_id = esc_attr($video_id);

						$content = '<object width="425" height="350"><param name="movie" value="http://www.youtube.com/v/' . $video_id . '"></param><param name="wmode" value="transparent"></param><embed src="http://www.youtube.com/v/' . $video_id . '" type="application/x-shockwave-flash" wmode="transparent" width="425" height="350"></embed></object>';

					} elseif ( preg_match("/vimeo\.com\/[0-9]+/i", $url) ) {

						list($domain, $video_id) = split(".com/", $url);

						$video_id = esc_attr($video_id);

						$content = '<object width="400" height="225"><param name="allowfullscreen" value="true" /><param name="allowscriptaccess" value="always" /><param name="movie" value="http://www.vimeo.com/moogaloop.swf?clip_id=' . $video_id . '&amp;server=www.vimeo.com&amp;show_title=1&amp;show_byline=1&amp;show_portrait=0&amp;color=&amp;fullscreen=1" />	<embed src="http://www.vimeo.com/moogaloop.swf?clip_id=' . $video_id . '&amp;server=www.vimeo.com&amp;show_title=1&amp;show_byline=1&amp;show_portrait=0&amp;color=&amp;fullscreen=1" type="application/x-shockwave-flash" allowfullscreen="true" allowscriptaccess="always" width="400" height="225"></embed></object>';

						if ( trim($selection) == '' )

							$selection = '<p><a href="http://www.vimeo.com/' . $video_id . '?pg=embed&sec=' . $video_id . '">' . $title . '</a> on <a href="http://vimeo.com?pg=embed&sec=' . $video_id . '">Vimeo</a></p>';

					} elseif ( strpos( $selection, '<object' ) !== false ) {

						$content = $selection;

					}

					?>

					jQuery('#embed-code').prepend('<?php echo htmlentities($content); ?>');

				});

				jQuery('#extra-fields').show();