1 <?php

     2 // $Id: fckeditor.module,v 1.20.2.99 2009/03/11 14:29:55 wwalc Exp $

     3 /**

     4  * FCKeditor - The text editor for Internet - http://www.fckeditor.net

     5  * Copyright (C) 2003-2008 Frederico Caldeira Knabben

     6  *

     7  * == BEGIN LICENSE ==

     8  *

     9  * Licensed under the terms of any of the following licenses at your

    10  * choice:

    11  *

    12  *  - GNU General Public License Version 2 or later (the "GPL")

    13  *    http://www.gnu.org/licenses/gpl.html

    14  *

    15  *  - GNU Lesser General Public License Version 2.1 or later (the "LGPL")

    16  *    http://www.gnu.org/licenses/lgpl.html

    17  *

    18  *  - Mozilla Public License Version 1.1 or later (the "MPL")

    19  *    http://www.mozilla.org/MPL/MPL-1.1.html

    20  *

    21  * == END LICENSE ==

    22  *

    23  * @file

    24  * FCKeditor Module for Drupal 6.x

    25  *

    26  * This module allows Drupal to replace textarea fields with FCKeditor.

    27  *

    28  * This HTML text editor brings to the web many of the powerful functionalities

    29  * of known desktop editors like Word. It's really  lightweight and doesn't

    30  * require any kind of installation on the client computer.

    31  */

    32 

    33 /**

    34  * The name of simplified toolbar which should be forced

    35  * Be sure that this toolbar is defined in fckeditor.config.js or fckconfig.js

    36  */

    37 define('FCKEDITOR_FORCE_SIMPLE_TOOLBAR_NAME', 'DrupalBasic') ;

    38 

    39 global $_fckeditor_configuration;

    40 global $_fckeditor_js_ids;

    41 

    42 $_fckeditor_configuration = array();

    43 $_fckeditor_js_ids = array();

    44 

    45 /**

    46  * Implementation of hook_help

    47  */

    48 function fckeditor_help($path, $arg) {

    49   switch ($path) {

    50     case 'admin/settings/help#description':

    51       $output = t("Enables the usage of FCKeditor (WYSIWYG editor) instead of plain text fields.");

    52       break;

    53     case 'admin/settings/fckeditor':

    54       if (!empty($arg[3]) && in_array($arg[3], array("addg", "editg"))) {

    55         $output = t("<p>The Global Profile allows you to define settings that are common for all profiles. Values defined in other profiles will be appended to the global configuration. This way you can avoid repeating some of the settings that are usually the same in each profile.</p>");

    56         break;

    57       }

    58       else if (!empty($arg[3]) && in_array($arg[3], array("add", "edit"))) {

    59         $output = t("<p>Note: FCKeditor is highly configurable. The most commonly used features are listed below. If you want to take a look at all available settings, open <code>!fckconfig</code> and then customize <code>!fckeditor_config</code> to your needs. This is also the only way to define new toolbar sets. It is advised to not edit <code>fckconfig.js</code> because you may overwrite it accidentally when you update the editor.</p>", array('!fckconfig' => drupal_get_path('module', 'fckeditor') ."/fckeditor/fckconfig.js", '!fckeditor_config' => drupal_get_path('module', 'fckeditor') ."/fckeditor.config.js"));

    60         break;

    61       }

    62       else if (!empty($arg[3]) && in_array($arg[3], array("delete", "deleteg"))) {

    63         break;

    64       }

    65       $output = t("<p>The FCKeditor module allows Drupal to replace textarea fields with a rich text or <acronym title=\"What You See Is What You Get\">WYSIWYG</acronym> editor. This editor brings many of the powerful functionalities of known desktop editors like Word to the web. It's relatively lightweight and doesn't require any kind of installation on the client computer.</p><p>More information about the editor is located at the !fckeditorlink. A small user guide is located at !userguidelink.</p>",

    66       array(

    67       '!fckeditorlink' => l(t('FCKeditor homepage'), 'http://www.fckeditor.net'),

    68       '!userguidelink' => l(t('FCKeditor userguide'), 'http://docs.fckeditor.net/FCKeditor/Users_Guide'))

    69       );

    70       $output .= t('<p>Profiles can be defined based on user roles. A FCKeditor profile can define which pages receive this FCKeditor capability, what buttons or themes are enabled for the editor, how the editor is displayed, and a few other editor functions. It is possible also to define the Global Profile that will hold values that will be appended to all other profiles.</p><p>Lastly, only users with the <code>!access1</code> !permission will be able to use FCKeditor. </p>', array('!permission' => l(t('permission'), 'admin/user/permissions'), '!access1' => t('access fckeditor')));

    71       break;

    72     case 'admin/help#fckeditor':

    73       $output = t("<p>The FCKeditor module allows Drupal to replace textarea fields with a rich text or <acronym title=\"What You See Is What You Get\">WYSIWYG</acronym> editor. This editor brings many of the powerful functionalities of known desktop editors like Word to the web. It's relatively lightweight and doesn't require any kind of installation on the client computer.</p><p>More information is located at the !fckeditorlink. A small user guide is located at !userguidelink.</p>",

    74       array(

    75       '!fckeditorlink' => l(t('FCKeditor homepage'), 'http://www.fckeditor.net'),

    76       '!userguidelink' => l(t('FCKeditor userguide'), 'http://docs.fckeditor.net/FCKeditor/Users_Guide'))

    77       );

    78       $output .= t('<h3>Configuration</h3><ol><li>Go to the !fckeditorlink and download the latest version of FCKeditor. Then uncompress the contents of the "fckeditor" directory of the downloaded file to %fckeditordir.</li><li>Enable the module as usual from Drupal\'s admin pages.</li><li>Grant permissions for use of FCKeditor in <code>!path2</code><br />Note: to enable the file browser, read also the <i>How to enable the file browser</i> section.</li><li>Under <code>!path1</code>, adjust the fckeditor profiles. In each profile you can choose which textareas will be replaced by FCKeditor, select default toolbar and configure some more advanced settings.</li><li>For the Rich Text Editing to work you also need to configure your !filterlink for the users that may access Rich Text Editing. Either grant those users Full HTML access or use the following: <br /><code>!filter</code>. </li><li>To have a better control over line breaks, you may disable <code>Line break converter</code> in the chosen filter (recommended).</li><li>Modify the fckeditor.config.js file to custom your needs (optional).<br />You may copy the needed configuration lines from the default FCKeditor configuration settings (!fckconfig), the lines in fckeditor.config.js will override most settings.</li></ol>',

    79       array(

    80       '!fckeditorlink' => l(t('FCKeditor homepage'), 'http://www.fckeditor.net/download'),

    81       '%fckeditordir' => base_path() . drupal_get_path('module', 'fckeditor') .'/fckeditor/',

    82       '!path1' => l(t('Administer > Site configuration > FCKeditor'), 'admin/settings/fckeditor'),

    83       '!path2' => l(t('Administer > User Management > Permissions'), 'admin/user/permissions'),

    84       '!filter' => htmlentities('<a> <p> <span> <div> <h1> <h2> <h3> <h4> <h5> <h6> <img> <map> <area>

    85       <hr> <br> <br /> <ul> <ol> <li> <dl> <dt> <dd> <table> <tr> <td> <em>

    86       <b> <u> <i> <strong> <font> <del> <ins> <sub> <sup> <quote> <blockquote>

    87       <pre> <address> <code> <cite> <embed> <object> <param> <strike> <caption>'),

    88       '!fckconfig' => base_path() . drupal_get_path('module', 'fckeditor') .'/fckeditor/fckconfig.js',

    89       '!moduledir' => base_path() . drupal_get_path('module', 'fckeditor') .'/fckeditor',

    90       '!filterlink' => l(t('filters'), 'admin/settings/filters'))

    91       );

    92       $output .= t('<h3>Installation troubleshooting</h3><p>If your FCKeditor does not show you must check if all files are extracted correctly. The directory %fckeditordir should have the following files: <code>fckeditor.js, fckconfig.js, fckstyles.xml, fcktemplates.xml</code> and a directory named <code>editor</code>.</p>',

    93       array(

    94       '%fckeditordir' => base_path() . drupal_get_path('module', 'fckeditor') .'/fckeditor/')

    95       );

    96       $output .= t('The correct directory structure is as follows: <blockquote><pre>!structure</pre></blockquote>', array(

    97       '!structure' => "modules\n   fckeditor\n      <em>fckeditor.module</em>\n      fckeditor\n         _samples\n         editor\n         <em>COPY_HERE.txt</em>\n         <em>fckconfig.js</em>\n         ..."

    98       ));

    99       $output .= t("<h3>Plugins: Teaser break and Pagebreak</h3><p>By default, FCKeditor module comes with two plugins that can handle teaser break (&lt;!--break--&gt;) and pagebreak (&lt;!--pagebreak--&gt;). You can enable any (or even both) of them.<ol><li>Open <code>!fckeditor.config.js</code> and uncomment these three lines: <pre>!code</pre></li><li>The second step is to add buttons to the toolbar (in the same file). The button names are: <code>DrupalBreak, DrupalPageBreak</code>. For example if you have a toolbar with an array of buttons defined as follows: <pre>!buttons1</pre> simply add those two buttons at the end of array: <pre>!buttons2</pre> (remember about single quotes).</li><li>Note that the &lt;--pagebreak--&gt; tag is not supported by default in Drupal. You should install the <a href=\"!paging\" target=\"_blank\">Paging</a> module to enable the &lt;!--pagebreak--&gt; tag support. Please refer to the Paging module documentation for detailed installation instructions.</li></ol></p>",

   100       array(

   101       '!fckeditor.config.js' => base_path() . drupal_get_path('module', 'fckeditor') .'/fckeditor.config.js',

   102       '!code' => "

   103       FCKConfig.PluginsPath = '../../plugins/' ;

   104       FCKConfig.Plugins.Add( 'drupalbreak' ) ;

   105       FCKConfig.Plugins.Add( 'drupalpagebreak' ) ;

   106       ",

   107       "!paging" => "http://drupal.org/project/paging",

   108       '!buttons1' => "['Image','Flash','Table','Rule','SpecialChar']",

   109       '!buttons2' => "['Image','Flash','Table','Rule','SpecialChar', 'DrupalBreak', 'DrupalPageBreak']",

   110       ));

   111       $output .= t('<h3>Uploading images and files</h3><p>There are three ways of uploading files: by using the built-in file browser, by using modules like !imce, !ib, !webfm or by using the core upload module.</p>',

   112       array(

   113       '!imce' => l(t('IMCE'), 'http://drupal.org/project/imce'),

   114       '!ib' => l(t('Image Browser'), 'http://drupal.org/project/imagebrowser'),

   115       '!webfm' => l(t('Web File Manager'), 'http://drupal.org/project/webfm'),

   116       )

   117       );

   118       // the rest is untranslated for the moment

   119       $output .= t("<h3>How to enable the file browser</h3><p>The editor gives the end user the flexibility to create a custom file browser that can be integrated on it. The included file browser allows users to view the content of a specific directory on the server and add new content to that directory (create folders and upload files).</p><p><ol><li>To enable file browsing you need to edit the connector configuration file in your fckeditor module directory, the file should be in:<blockquote><code>!config3</code> <br /> (FCKeditor 2.5+)<br /><br /> or <br /><br /><code>!config1</code><br /> and <br /><code>!config2</code> <br /> (FCKeditor 2.3.x - 2.4.x)</blockquote></p><p>In this file(s) you will need to enable the file browser by adding one line that includes file with the special authentication function for Drupal (<code>filemanager.config.php</code>). Add this code: <blockquote><code>!code1</code><br /> (FCKeditor 2.5+)</blockquote> or <blockquote><code>!code2</code> <br /> (FCKeditor 2.3.x - 2.4.x)</blockquote> straight below this line: <blockquote><code>!code3</code></blockquote> The config.php file also holds some other important settings, please take a look at it and adjust it to your needs (optional).</p></li>",

   120       array('!config1' => base_path() . drupal_get_path('module', 'fckeditor') ."/fckeditor/editor/filemanager/browser/default/connectors/php/config.php",

   121       '!config2' => base_path() . drupal_get_path('module', 'fckeditor') ."/fckeditor/editor/filemanager/upload/php/config.php",

   122       '!config3' => base_path() . drupal_get_path('module', 'fckeditor') ."/fckeditor/editor/filemanager/connectors/php/config.php",

   123       '!filesdir' => file_directory_path(),

   124       '!code1' => 'require_once "../../../../../filemanager.config.php";', //2.5

   125       '!code2' => 'require_once "'. str_replace("\\", "\\\\", dirname(__FILE__) . DIRECTORY_SEPARATOR .'filemanager.config.php"'), //2.4

   126       '!code3' => "\$Config['UserFilesAbsolutePath'] = '' ;",

   127       )

   128       );

   129       $output .= t("<li>As of Drupal 5.2, additional step is required: locate file named <code>settings.php</code> inside your drupal directory (usually <code>sites/default/settings.php</code>) and set <strong><code>&#36;cookie_domain</code></strong> variable to the appropiate domain (remember to uncomment that line). If you not do this, FCKeditor will claim that file browser is disabled</li>");

   130       $output .= t('<li>Enabling file uploads is <strong>a security risk</strong>. That\'s why you have to grant a !link to enable the file browser to certain groups (assign the &quot;!allowupload&quot; permissions).</li>', array('!link' => l(t('separate permission'), 'admin/user/permissions'), "!allowupload" => t("allow fckeditor file uploads")));

   131       $output .= t('<li>Lastly, adjust the !fb for each !profile.</li></ol>', array('!fb' => t('File browser settings'), '!profile' => l(t('profile'), 'admin/settings/fckeditor')));

   132       $output .= t("<h3>Modules: Image Assist</h3><p>Image Assist can be integrated with FCKeditor. To do this, simply copy the <code>!iaf1</code> file to <code>!iaf2</code>.</p>", array("!iaf1" => drupal_get_path('module', 'fckeditor') ."/img_assist_fckeditor.js", "!iaf2" => drupal_get_path('module', 'img_assist') ."/img_assist_fckeditor.js"));

   133 

   134       break;

   135   }

   136   return !empty($output) ? $output : "";

   137 }

   138 

   139 /**

   140  * Implementation of hook_perm

   141  * Administer -> User management -> Permissions

   142  */

   143 function fckeditor_perm() {

   144   return array('administer fckeditor', 'access fckeditor', 'allow fckeditor file uploads');

   145 }

   146 

   147 

   148 /**

   149  * Implementation of textarea

   150  * Replace textarea with FCKeditor using callback function (fckeditor_process_textarea)

   151  */

   152 function fckeditor_elements() {

   153   $type = array();

   154   $type['textfield'] = array(

   155     '#process' => array(

   156     'fckeditor_process_input'

   157   ),

   158   );

   159   if (user_access('access fckeditor')) {

   160     // only roles with permission get the fckeditor

   161     if (fckeditor_is_compatible_client()) {

   162       // it would be useless to dig deeper if we're not able or allowed to

   163       $type['textarea'] = array('#process' => array('fckeditor_process_textarea'));

   164       $type['form'] = array('#after_build' => array('fckeditor_process_form'));

   165     }

   166   }

   167   return $type;

   168 }

   169 

   170 function fckeditor_process_form(&$form) {

   171   global $_fckeditor_configuration, $_fckeditor_js_ids;

   172   static $processed_textareas = array();

   173   static $found_textareas = array();

   174 

   175   //Skip if:

   176   // - we're not editing an element

   177   // - fckeditor is not enabled (configuration is empty)

   178   if (arg(1) == "add" || arg(1) == "reply" || !count($_fckeditor_configuration)) {

   179     return $form;

   180   }

   181 

   182   $fckeditor_filters = array();

   183 

   184   // Iterate over element children; resetting array keys to access last index.

   185   if ($children = array_values(element_children($form))) {

   186     foreach ($children as $index => $item) {

   187       $element = &$form[$item];

   188 

   189       if (isset($element['#id']) && in_array($element['#id'], array_keys($_fckeditor_js_ids))) {

   190         $found_textareas[$element['#id']] = &$element;

   191       }

   192 

   193       // filter_form() always uses the key 'format'. We need a type-agnostic

   194       // match to prevent false positives. Also, there must have been at least

   195       // one element on this level.

   196       if ($item === 'format' && $index > 0) {

   197 

   198         // Make sure we either match a input format selector or input format

   199         // guidelines (displayed if user has access to one input format only).

   200         if ((isset($element['#type']) && $element['#type'] == 'fieldset') || isset($element['format']['guidelines'])) {

   201           // The element before this element is the target form field.

   202           $field = &$form[$children[$index - 1]];

   203           $textarea_id = $field['#id'];

   204           $js_id = $_fckeditor_js_ids[$textarea_id];

   205 

   206           array_push($processed_textareas, $js_id);

   207 

   208           //search for checkxss1/2 class

   209           if (empty($field['#attributes']['class']) || strpos($field['#attributes']['class'], "checkxss") === FALSE) {

   210             continue;

   211           }

   212 

   213           // Determine the available input formats. The last child element is a

   214           // link to "More information about formatting options". When only one

   215           // input format is displayed, we also have to remove formatting

   216           // guidelines, stored in the child 'format'.

   217           $formats = element_children($element);

   218 

   219           foreach ($formats as $format_id) {

   220             $format = !empty($element[$format_id]['#default_value']) ? $element[$format_id]['#default_value'] : $element[$format_id]['#value'];

   221             break;

   222           }

   223 

   224           $enabled = filter_list_format($format);

   225           $fckeditor_filters = array();

   226 

   227           //loop through all enabled filters

   228           foreach ($enabled as $id => $filter) {

   229             //but use only that one selected in FCKeditor profile

   230             if (in_array($id, array_keys($_fckeditor_configuration[$textarea_id]['filters']))) {

   231               if (!isset($fckeditor_filters[$js_id])) {

   232                 $fckeditor_filters[$js_id] = array();

   233               }

   234               $fckeditor_filters[$js_id][] = $id ."/". $format;

   235             }

   236           }

   237 

   238           //No filters assigned, remove xss class

   239           if (empty($fckeditor_filters[$js_id])) {

   240             $field['#attributes']['class'] = preg_replace("/checkxss(1|2)/", "", $field['#attributes']['class']);

   241           }

   242           else {

   243             $field['#attributes']['class'] = strtr($field['#attributes']['class'], array("checkxss1" => "filterxss1", "checkxss2" => "filterxss2"));

   244           }

   245 

   246           array_pop($formats);

   247           unset($formats['format']);

   248         }

   249         // If this element is 'format', do not recurse further.

   250         continue;

   251       }

   252       // Recurse into children.

   253       fckeditor_process_form($element);

   254     }

   255   }

   256 

   257   //We're in a form

   258   if (isset($form['#action'])) {

   259     //some textareas associated with FCKeditor has not been processed

   260     if (count($processed_textareas) < count($_fckeditor_js_ids)) {

   261       //loop through all found textfields

   262       foreach (array_keys($found_textareas) as $id) {

   263         $element = &$found_textareas[$id];

   264         //if not processed yet (checkxss class is before final processing)

   265         if (strpos($element['#attributes']['class'], "checkxss") !== FALSE && !in_array($_fckeditor_js_ids[$element['#id']], $processed_textareas) && !empty($_fckeditor_configuration[$id]['filters'])) {

   266           //assign default Filtered HTML to be safe on fields that do not have input format assigned, but only if at least one security filter is enabled in Security settings

   267           $js_id = $_fckeditor_js_ids[$element['#id']];

   268           $fckeditor_filters[$js_id][] = "filter/0/1";

   269           $element['#attributes']['class'] = strtr($element['#attributes']['class'], array("checkxss1" => "filterxss1", "checkxss2" => "filterxss2"));

   270         }

   271       }

   272     }

   273   }

   274 

   275   if (!empty($fckeditor_filters)) {

   276     drupal_add_js(array('fckeditor_filters' => $fckeditor_filters), 'setting');

   277   }

   278 

   279   return $form;

   280 }

   281 

   282 /**

   283  * Allow more than 255 chars in Allowed HTML tags textfield

   284  *

   285  */

   286 function fckeditor_process_input($element) {

   287   if ($element['#id']=='edit-allowed-html-1') {

   288     $element['#maxlength'] = max($element['#maxlength'], 1024);

   289   }

   290   return $element;

   291 }

   292 

   293 /**

   294  * Add link to FCKeditor configuration in "Administer ->  Site configuration" section

   295  *

   296  */

   297 function fckeditor_menu() {

   298 

   299   $items = array();

   300 

   301   $items['fckeditor/xss'] = array(

   302     'title' => 'XSS Filter',

   303     'description' => 'XSS Filter.',

   304     'page callback' => 'fckeditor_filter_xss',

   305     'access arguments' => array('access fckeditor'),

   306     'type' => MENU_CALLBACK,

   307   );

   308 

   309   $items['admin/settings/fckeditor'] = array(

   310   'title' => 'FCKeditor',

   311   'description' => 'Configure the rich editor.',

   312   'page callback' => 'fckeditor_admin',

   313   'access arguments' => array('administer fckeditor'),

   314   'type' => MENU_NORMAL_ITEM,

   315   );

   316 

   317   return $items;

   318 }

   319 

   320 /**

   321  * AJAX callback - XSS filter

   322  */

   323 function fckeditor_filter_xss() {

   324   $GLOBALS['devel_shutdown'] = FALSE;

   325 

   326   if (!isset($_POST['text']) || !is_string($_POST['text']) || !is_array($_POST['filters'])) {

   327     exit;

   328   }

   329 

   330   $text = $_POST['text'];

   331   $text = strtr($text, array('<!--' => '__COMMENT__START__', '-->' => '__COMMENT__END__'));

   332 

   333   foreach ($_POST['filters'] as $module_delta) {

   334     $module = strtok($module_delta, "/");

   335     $delta = strtok("/");

   336     $format = strtok("/");

   337 

   338     if (!module_hook($module, 'filter')) {

   339       continue;

   340     }

   341 

   342     //built-in filter module, a special case where we would like to strip XSS and nothing more

   343     if ($module == 'filter' && $delta == 0) {

   344       preg_match_all("|</?([a-z][a-z0-9]*)(?:\b[^>]*)>|i", $text, $matches);

   345       if ($matches[1]) {

   346         $tags = array_unique($matches[1]);

   347         $text = filter_xss($text, $tags);

   348       }

   349     }

   350     else {

   351       $text = module_invoke($module, 'filter', 'process', $delta, $format, $text);

   352     }

   353   }

   354 

   355   $text = strtr($text, array('__COMMENT__START__' => '<!--', '__COMMENT__END__' => '-->'));

   356 

   357   echo $text;

   358   exit;

   359 }

   360 

   361 //Remove a profile from the database.

   362 function fckeditor_profile_delete($name) {

   363   db_query("DELETE FROM {fckeditor_settings} WHERE name = '%s'", $name);

   364   db_query("DELETE FROM {fckeditor_role} WHERE name = '%s'", $name);

   365 }

   366 

   367 /**

   368  * Profile validation.

   369  */

   370 function fckeditor_profile_validate($edit) {

   371   $errors = array();

   372 

   373   //include mode and all other fields are empty, invalid

   374   if ($edit['excl_mode'] == 1 && !$edit['excl_fields'] && !$edit['excl_paths']) {

   375     $errors['excl_mode'] = t('Include mode selected, but no fields/paths given. Enter at least one path or field where FCKeditor should appear.');

   376   }

   377 

   378   if (!preg_match("/^\d+$/", trim($edit['min_rows']))) {

   379     $errors['min_rows'] = t('Minimum rows must be a valid number');

   380   }

   381 

   382   if ($edit['default'] == 't' && $edit['popup'] == 't') {

   383     $errors['popup'] = t('If FCKeditor is enabled by default, popup window must be disabled.');

   384   }

   385 

   386   if ($edit['show_toggle'] == 't' && $edit['popup'] == 't') {

   387     $errors['popup'] = t('If toggle is enabled, popup window must be disabled.');

   388   }

   389 

   390   if (!$edit['name']) {

   391     $errors['name'] = t('You must give a profile name.');

   392   }

   393 

   394   if (!preg_match("/^\d+%?$/", $edit['width'])) {

   395     $errors['width'] = t('Enter valid width. Ex: 400 or 100%');

   396   }

   397 

   398   if (!empty($edit['css_path'])) {

   399     if ($edit['css_mode'] != 'self') {

   400       $errors['css_path'] = t('CSS path is not empty. Please set the "Editor CSS" option to "define css" mode.');

   401     }

   402     else if (false !== strpos($edit['css_path'], '"')) {

   403       $errors['css_path'] = t('Double quotes are not allowed in CSS path.');

   404     }

   405     else if (substr($edit['css_path'], 0, 1) == "'" && substr($edit['css_path'], -1) == "'") {

   406       $errors['css_path'] = t('Enter valid path, do not surround it with quotes.');

   407     }

   408   }

   409 

   410   if (!empty($edit['styles_path'])) {

   411     if ($edit['css_style'] != 'self') {

   412       $errors['styles_path'] = t('Path to predefined styles is not empty. Please set the "Predefined styles" option to "define path to fckstyles.xml" mode.');

   413     }

   414     else if (false !== strpos($edit['styles_path'], '"')) {

   415       $errors['styles_path'] = t('Double quotes are not allowed in path.');

   416     }

   417     else if (substr($edit['styles_path'], 0, 1) == "'" && substr($edit['styles_path'], -1) == "'") {

   418       $errors['styles_path'] = t('Enter valid path, do not surround it with quotes.');

   419     }

   420   }

   421 

   422   if (!empty($edit['font_format'])) {

   423     if (!preg_match("/^((p|div|pre|address|h1|h2|h3|h4|h5|h6);)*(p|div|pre|address|h1|h2|h3|h4|h5|h6)$/", $edit['font_format'])) {

   424       $errors['font_format'] = t('Enter valid, semicolon separated, list of HTML font formats (no semicolon at the end of list expected).');

   425     }

   426   }

   427 

   428   //validate fields

   429   $fields = preg_split("/[\s,]+/", strip_tags($edit['excl_fields']));

   430   foreach ($fields as $field) {

   431     if ($field && !preg_match("/^[a-z]+(\-{1,2}[[:alnum:]]+|\\*|\-\\*)+$/i", $field)) {

   432       $errors['excl_fields'] = t("Invalid field specified: %1", array("%1" => $field));

   433       break;

   434     }

   435   }

   436 

   437   $fields = preg_split("/[\s,]+/", strip_tags($edit['simple_incl_fields']));

   438   foreach ($fields as $field) {

   439     if ($field && !preg_match("/^[a-z]+(\-{1,2}[[:alnum:]]+|\\*|\-\\*)+$/i", $field)) {

   440       $errors['simple_incl_fields'] = t("Invalid field specified: %1", array("%1" => $field));

   441       break;

   442     }

   443   }

   444 

   445   //validate paths

   446   $paths = preg_split("/[\s,]+/", strip_tags($edit['excl_paths']));

   447   foreach ($paths as $path) {

   448     if ($path && !preg_match("|^[_a-z0-9-\*/]*$|i", $path)) {

   449       $errors['excl_paths'] = t("Invalid path specified: %1", array("%1" => $path));

   450       break;

   451     }

   452   }

   453 

   454   $paths = preg_split("/[\s,]+/", strip_tags($edit['simple_incl_paths']));

   455   foreach ($paths as $path) {

   456     if ($path && !preg_match("|^[_a-z0-9-\*/]*$|i", $path)) {

   457       $errors['simple_incl_paths'] = t("Invalid path specified: %1", array("%1" => $path));

   458       break;

   459     }

   460   }

   461 

   462   if (variable_get('file_downloads', '') !== FILE_DOWNLOADS_PRIVATE) {

   463     if (!empty($edit['UserFilesAbsolutePath']) && empty($edit['UserFilesPath'])) {

   464       $errors['UserFilesPath'] = t("Path to uploaded files is required.");

   465     }

   466     if (!empty($edit['UserFilesPath']) && empty($edit['UserFilesAbsolutePath'])) {

   467       $errors['UserFilesPath'] = t("Absolute path to uploaded files is required.");

   468     }

   469   }

   470 

   471   foreach ($errors as $name => $message) {

   472     form_set_error($name, $message);

   473   }

   474 

   475   return count($errors) == 0;

   476 }

   477 

   478 /**

   479  * Global profile validation.

   480  */

   481 function fckeditor_global_profile_validate($edit) {

   482   $errors = array();

   483 

   484   //include mode and all other fields are empty, invalid

   485   if ($edit['excl_mode'] == 1 && !$edit['excl_fields'] && !$edit['excl_paths']) {

   486     $errors['excl_mode'] = t('Include mode selected, but no fields/paths given. Enter at least one path or field where FCKeditor should appear.');

   487   }

   488 

   489   //validate fields

   490   $fields = preg_split("/[\s,]+/", strip_tags($edit['excl_fields']));

   491   foreach ($fields as $field) {

   492     if ($field && !preg_match("/^[a-z]+(\-{1,2}[[:alnum:]]+|\\*|\-\\*)+$/i", $field)) {

   493       $errors['excl_fields'] = t("Invalid field specified: %1", array("%1" => $field));

   494       break;

   495     }

   496   }

   497 

   498   $fields = preg_split("/[\s,]+/", strip_tags($edit['simple_incl_fields']));

   499   foreach ($fields as $field) {

   500     if ($field && !preg_match("/^[a-z]+(\-{1,2}[[:alnum:]]+|\\*|\-\\*)+$/i", $field)) {

   501       $errors['simple_incl_fields'] = t("Invalid field specified: %1", array("%1" => $field));

   502       break;

   503     }

   504   }

   505 

   506   //validate paths

   507   $paths = preg_split("/[\s,]+/", strip_tags($edit['excl_paths']));

   508   foreach ($paths as $path) {

   509     if ($path && !preg_match("|^[_a-z0-9-\*/]*$|i", $path)) {

   510       $errors['excl_paths'] = t("Invalid path specified: %1", array("%1" => $path));

   511       break;

   512     }

   513   }

   514 

   515   $paths = preg_split("/[\s,]+/", strip_tags($edit['simple_incl_paths']));

   516   foreach ($paths as $path) {

   517     if ($path && !preg_match("|^[_a-z0-9-\*/]*$|i", $path)) {

   518       $errors['simple_incl_paths'] = t("Invalid path specified: %1", array("%1" => $path));

   519       break;

   520     }

   521   }

   522 

   523   foreach ($errors as $name => $message) {

   524     form_set_error($name, $message);

   525   }

   526 

   527   return count($errors) == 0;

   528 }

   529 

   530 /**

   531  * Controller for FCKeditor administrative settings.

   532  */

   533 function fckeditor_admin($arg = NULL) {

   534 

   535   $module_drupal_path = drupal_get_path('module', 'fckeditor');

   536   $fckconfig_file = $module_drupal_path .'/fckeditor/fckconfig.js';

   537   if (!file_exists($fckconfig_file)) {

   538     drupal_set_message(t('checking for %filename', array('%filename' => $fckconfig_file)));

   539     drupal_set_message(

   540     t('The FCKeditor component is not installed correctly. Please go to the !fckeditorlink to download the latest version. After that you must extract the files to %modulepath and make sure that the directory %modulesubdir and the file %modulefile exist. Refer to the !readme for more information.',

   541     array(

   542     '!fckeditorlink' => l(t('FCKeditor homepage'), 'http://www.fckeditor.net/download'),

   543     '!readme' => l('readme.txt', 'admin/help/fckeditor'),

   544     '%modulepath' => base_path() . $module_drupal_path .'/fckeditor/',

   545     '%modulesubdir' => base_path() . $module_drupal_path .'/fckeditor/editor',

   546     '%modulefile' => base_path() . $module_drupal_path .'/fckeditor/fckeditor.js')),

   547     'error');

   548     return FALSE;

   549   }

   550 

   551   $edit = $_POST;

   552   $op = isset($_POST['op']) ? $_POST['op'] : "";

   553 

   554   $op = $arg && !$op ? $arg : $op;

   555 

   556   switch ($op) {

   557     case 'add':

   558       $output = fckeditor_profile_form($edit);

   559       break;

   560 

   561     case 'addg':

   562       $output = fckeditor_global_profile_form($edit);

   563       break;

   564 

   565     case 'edit':

   566       drupal_set_title(t('Edit FCKeditor profile'));

   567       $output = fckeditor_profile_form(fckeditor_profile_load(urldecode(arg(4))));

   568       break;

   569 

   570     case 'editg':

   571       drupal_set_title(t('Edit FCKeditor profile'));

   572       $output = fckeditor_global_profile_form(fckeditor_profile_load("FCKeditor Global Profile"));

   573       break;

   574 

   575     case 'deleteg':

   576       $output = fckeditor_ask_delete_confirmation(TRUE);

   577       break;

   578 

   579     case 'delete':

   580       $output = fckeditor_ask_delete_confirmation(FALSE, urldecode(arg(4)));

   581       break;

   582 

   583     case 'deleteconfirmed':

   584       fckeditor_profile_delete(urldecode(arg(4)));

   585       drupal_set_message(t('Deleted profile'));

   586       drupal_goto('admin/settings/fckeditor');

   587       break;

   588 

   589     case 'deletegconfirmed':

   590       fckeditor_profile_delete("FCKeditor Global Profile");

   591       drupal_set_message(t('Deleted Global profile'));

   592       drupal_goto('admin/settings/fckeditor');

   593       break;

   594 

   595     case t('Create profile');

   596     case t('Update profile');

   597     if (fckeditor_profile_validate($edit)) {

   598       fckeditor_profile_save($edit);

   599       !empty($edit['old_name']) ? drupal_set_message(t('Your FCKeditor profile has been updated.')) : drupal_set_message(t('Your FCKeditor profile has been created.'));

   600       drupal_goto('admin/settings/fckeditor');

   601     }

   602     else {

   603       $output = fckeditor_profile_form($edit);

   604     }

   605     break;

   606 

   607     case t('Create global profile');

   608     case t('Update global profile');

   609     if (fckeditor_global_profile_validate($edit)) {

   610       $edit['name'] = 'FCKeditor Global Profile';

   611       fckeditor_global_profile_save($edit);

   612       drupal_set_message(t('FCKeditor global profile has been saved.'));

   613       drupal_goto('admin/settings/fckeditor');

   614     }

   615     else {

   616       $output = fckeditor_global_profile_form($edit);

   617     }

   618     break;

   619 

   620     default:

   621       drupal_set_title(t('FCKeditor settings'));

   622       //Check if FCKeditor is installed.

   623       $fckeditor_loc = drupal_get_path('module', 'fckeditor') .'/fckeditor/';

   624       if (!is_dir($fckeditor_loc)) {

   625         drupal_set_message(t('Could not find the FCKeditor engine installed at <strong>!fckeditor-directory</strong>. Please !download, uncompress it and copy the folder into !fckeditor-path.', array('!fckeditor-path' => drupal_get_path('module', 'fckeditor'), '!fckeditor-directory' => $fckeditor_loc, '!download' => l(t("download FCKeditor"), "http://www.fckeditor.net/download"))), 'error');

   626       }

   627 

   628       $access_fckeditor_roles = user_roles(FALSE, 'access fckeditor');

   629       if (!$access_fckeditor_roles) {

   630         drupal_set_message(t('There is currently no role with the <strong>!access</strong> permission. Visit !acl administration section.',

   631         array("!access" => t("access fckeditor"), "!acl" => l(t("Permissions"), "admin/user/permissions"))), "warning");

   632       }

   633       else {

   634         $result = db_query_range("SELECT name FROM {fckeditor_settings} WHERE name<>'FCKeditor Global Profile'", 0, 1);

   635         $has_profiles = FALSE;

   636         //find profile other than Global

   637         if ($obj = db_fetch_object($result)) {

   638           $has_profiles = TRUE;

   639         }

   640 

   641         //find roles with profiles

   642         $result = db_query("SELECT rid FROM {fckeditor_role}");

   643         $rids = array();

   644         while ($obj = db_fetch_object($result)) {

   645           $rids[] = $obj->rid;

   646         }

   647         $rids = array_unique($rids);

   648         if (!$has_profiles) {

   649           drupal_set_message(t("No FCKeditor profiles found. At this moment, nobody is able to use FCKeditor. Create new profile below."), "error");

   650         }

   651         else {

   652           //not all roles with access fckeditor has their FCKeditor profile assigned

   653           $diff = array_diff(array_keys($access_fckeditor_roles), $rids);

   654           if ($diff) {

   655             $list = "<ul>";

   656             foreach ($diff as $rid) {

   657               $list .= "<li>". $access_fckeditor_roles[$rid] ."</li>";

   658             }

   659             $list .= "</ul>";

   660             drupal_set_message(t("Not all roles with <strong>!access</strong> permission are associated with FCKeditor profiles. As a result, users having the following roles may be unable to use FCKeditor: !list Create new or edit FCKeditor profiles below and in the <strong>Basic setup</strong> section, check &quot;Roles allowed to use this profile&quot;.", array("!access" => l(t("access fckeditor"), "admin/user/permissions"), "!list" => $list)), "warning");

   661           }

   662         }

   663       }

   664 

   665       $output = fckeditor_profile_overview();

   666   }

   667 

   668   return $output;

   669 }

   670 

   671 /**

   672  * Save a profile to the database.

   673  * @todo add more entries to array in the user_save line

   674  */

   675 function fckeditor_profile_save($edit) {

   676   db_query("DELETE FROM {fckeditor_settings} WHERE name = '%s' or name = '%s'", $edit['name'], empty($edit['old_name']) ? "" : $edit['old_name']);

   677   db_query("DELETE FROM {fckeditor_role} WHERE name = '%s' or name = '%s'", $edit['name'], empty($edit['old_name']) ? "" : $edit['old_name']);

   678   db_query("INSERT INTO {fckeditor_settings} (name, settings) VALUES ('%s', '%s')", $edit['name'], serialize($edit));

   679   if (!empty($edit['rids']))

   680   foreach ($edit['rids'] as $rid => $value) {

   681     db_query("INSERT INTO {fckeditor_role} (name, rid) VALUES ('%s', %d)", $edit['name'], $rid);

   682   }

   683 

   684   // if users can't set their own defaults, make sure to remove $user->fckeditor_status so their default doesn't override the main default

   685   if (!empty($edit['user_choose']) && $edit['user_choose'] == 'false') {

   686     global $user;

   687     user_save($user, array('fckeditor_status' => NULL));

   688   }

   689 }

   690 

   691 function fckeditor_global_profile_save($edit) {

   692   if (isset($edit['rank'])) {

   693     $edit['rank'] = explode('>', str_replace(' ', '', $edit['rank']));

   694   }

   695 

   696   db_query("DELETE FROM {fckeditor_settings} WHERE name = '%s' or name = '%s'", $edit['name'], empty($edit['old_name']) ? "" : $edit['old_name']);

   697   db_query("DELETE FROM {fckeditor_role} WHERE name = '%s' or name = '%s'", $edit['name'], empty($edit['old_name']) ? "" : $edit['old_name']);

   698   db_query("INSERT INTO {fckeditor_settings} (name, settings) VALUES ('%s', '%s')", $edit['name'], serialize($edit));

   699 }

   700 

   701 /**

   702  * Controller for fckeditor profiles.

   703  */

   704 function fckeditor_profile_overview() {

   705   $output = '';

   706 

   707   $profiles = fckeditor_profile_load();

   708   if ($profiles) {

   709     $roles = user_roles();

   710     $access_fckeditor_roles = user_roles(FALSE, 'access fckeditor');

   711     $header = array(t('Profile'), t('Roles'), t('Operations'));

   712     foreach ($profiles as $p) {

   713       $rids = $p->rids;

   714       if ($p->name !== "FCKeditor Global Profile") {

   715         foreach ($p->rids as $rid => $name) {

   716           if (!isset($access_fckeditor_roles[$rid])) {

   717             unset($rids[$rid]);

   718           }

   719         }

   720         $rows[] = array(array('data' => $p->name, 'valign' => 'top'), array('data' => implode("<br />\n", $rids)), array('data' => l(t('edit'), 'admin/settings/fckeditor/edit/'. urlencode($p->name)) .' '. l(t('delete'), 'admin/settings/fckeditor/delete/'. urlencode($p->name)), 'valign' => 'top'));

   721       }

   722     }

   723     $output .= "<h3>". t("Profiles") ."</h3>";

   724     $output .= theme('table', $header, $rows);

   725     $output .= '<p>'. l(t('Create new profile'), 'admin/settings/fckeditor/add') .'</p>';

   726   }

   727   else {

   728     drupal_set_message(t('No profiles found. Click here to !create.', array('!create' => l(t("create a new profile"), 'admin/settings/fckeditor/add'))));

   729   }

   730 

   731   $rows = array();

   732   if (!isset($profiles['FCKeditor Global Profile'])) {

   733     drupal_set_message(t('Global Profile not found. Click here to !create.', array('!create' => l(t("create the global profile"), 'admin/settings/fckeditor/addg'))));

   734   }

   735   else {

   736     $output .= "<h3>". t("Global Settings") ."</h3>";

   737     $rows[] = array(array('data' => t('FCKeditor Global Profile'), 'valign' => 'top'), array('data' => l(t('edit'), 'admin/settings/fckeditor/editg') ." ". l(t('delete'), 'admin/settings/fckeditor/deleteg'), 'valign' => 'top'));

   738     $output .= theme('table', array(t('Profile'), t('Operations')), $rows);

   739   }

   740 

   741   return $output;

   742 }

   743 

   744 /**

   745  * Load all profiles. Just load one profile if $name is passed in.

   746  */

   747 function fckeditor_profile_load($name = '') {

   748   static $profiles = array();

   749 

   750   if (!$profiles) {

   751     $roles = user_roles();

   752     $result = db_query('SELECT * FROM {fckeditor_settings}');

   753     while ($data = db_fetch_object($result)) {

   754       $data->settings = unserialize($data->settings);

   755       $result2 = db_query("SELECT rid FROM {fckeditor_role} WHERE name = '%s'", $data->name);

   756       $role = array();

   757       while ($r = db_fetch_object($result2)) {

   758         $role[$r->rid] = $roles[$r->rid];

   759       }

   760       $data->rids = $role;

   761 

   762       $profiles[$data->name] = $data;

   763     }

   764   }

   765 

   766   return ($name ? $profiles[$name] : $profiles);

   767 }

   768 

   769 /**

   770  * @param int $excl_mode 1/include, exclude otherwise

   771  * @param string $excl_fields fields (HTML IDs)

   772  * @param string $excl_paths paths (drupal paths)

   773  * @param string $element_id current ID

   774  * @param string $get_q current path

   775  *

   776  * @return boolean

   777  *    returns true if FCKeditor is enabled

   778  */

   779 function fckeditor_is_enabled($excl_mode, $excl_fields, $excl_paths, $element_id, $get_q) {

   780   $arr_excl_fields = preg_split("/[\s,]+/", strip_tags($excl_fields));

   781   $field_found = fckeditor_idsearch($element_id, $arr_excl_fields);

   782 

   783   $path = drupal_get_path_alias($get_q);

   784   $regexp = '/^('. preg_replace(array('/(\r\n?|\n)/', '/\\\\\*/', '/(^|\|)\\\\<front\\\\>($|\|)/'), array('|', '.*', '\1'. preg_quote(variable_get('site_frontpage', 'node'), '/') .'\2'), preg_quote($excl_paths, '/')) .')$/';

   785   $path_found = preg_match($regexp, $path);

   786 

   787   $found = $field_found || $path_found;

   788 

   789   $result =  ($excl_mode == 1) ? $found : !$found;

   790   return $result;

   791 }

   792 

   793 /**

   794  * This function create the HTML objects required for the FCKeditor

   795  *

   796  * @param $element

   797  *   A fully populated form elment to add the editor to

   798  * @return

   799  *   The same $element with extra FCKeditor markup and initialization

   800  */

   801 function fckeditor_process_textarea($element) {

   802   static $is_running = FALSE;

   803   static $num = 1;

   804   static $id2id = array();

   805   static $processed_elements = array();

   806   global $user, $language, $theme, $theme_info, $base_theme_info, $_fckeditor_configuration, $_fckeditor_js_ids;

   807 

   808   $processed = in_array($element['#id'], $processed_elements);

   809 

   810   //hack for module developers that want to disable FCKeditor on their textareas

   811   if (key_exists('#wysiwyg', $element) && !$element['#wysiwyg']) {

   812     return $element;

   813   }

   814 

   815   //skip this one, surely nobody wants WYSIWYG here

   816   switch ($element['#id']) {

   817     case 'edit-excl-list':

   818     case 'edit-simple-incl-list':

   819     case 'edit-simple-incl-paths':

   820     case 'edit-simple-incl-fields':

   821     case 'edit-log':

   822     case 'edit-excl-fields':

   823     case 'edit-excl-paths':

   824     case 'edit-js-conf':

   825     case 'edit-teaser-js':

   826       return $element;

   827       break;

   828   }

   829 

   830   if (isset($element['#attributes']['disabled']) && $element['#attributes']['disabled'] == 'disabled') {

   831     return $element;

   832   }

   833 

   834   $profile = fckeditor_user_get_profile($user);

   835   if (!$profile) {

   836     return $element;

   837   }

   838 

   839   $conf = array();

   840   $conf = $profile->settings;

   841 

   842   if ($conf['allow_user_conf']=='t') {

   843     foreach (array('default', 'show_toggle', 'popup', 'skin', 'toolbar', 'expand', 'width', 'lang', 'auto_lang') as $setting) {

   844       $conf[$setting] = fckeditor_user_get_setting($user, $profile, $setting);

   845     }

   846   }

   847   if ($conf["popup"]=="t" && $conf["show_toggle"]=="t") {

   848     $conf["show_toggle"]="f";

   849   }

   850 

   851   //old profile info, assume Filtered HTML is enabled

   852   if (!isset($conf['ss'])) {

   853     $conf['ss'] = 2;

   854     $conf['filters']['filter/0'] = 1;

   855   }

   856   if (!isset($conf['filters'])) {

   857     $conf['filters'] = array();

   858   }

   859 

   860   $themepath = path_to_theme() .'/';

   861   $host = base_path();

   862 

   863   $enabled = fckeditor_is_enabled(empty($conf['excl_mode']) ? "" : $conf['excl_mode'], empty($conf['excl_fields']) ? "" : $conf['excl_fields'], empty($conf['excl_paths']) ? "" : $conf['excl_paths'], $element['#id'], $_GET['q']);

   864   if ($enabled) {

   865     $global_profile = fckeditor_profile_load("FCKeditor Global Profile");

   866     $global_conf = $global_profile->settings;

   867     if ($global_conf) {

   868       $enabled = fckeditor_is_enabled(empty($global_conf['excl_mode']) ? "" : $global_conf['excl_mode'], empty($global_conf['excl_fields']) ? "" : $global_conf['excl_fields'], empty($global_conf['excl_paths']) ? "" : $global_conf['excl_paths'], $element['#id'], $_GET['q']);

   869     }

   870   }

   871   if (!isset($element['#suffix'])) {

   872     $element['#suffix'] = "";

   873   }

   874 

   875   if ((($element['#rows'] > $conf['min_rows']) || ($conf['min_rows'] <= 1 && empty($element['#rows']))) && $enabled) {

   876     // only replace textarea when it has enough rows and it is enabled

   877 

   878     // Set resizable to false to avoid drupal.js resizable function from taking control of the textarea

   879     if ($conf["popup"]=="f") {

   880       $element['#resizable'] = FALSE;

   881     }

   882 

   883     if (in_array($element['#id'], $processed_elements)) {

   884       $js_id = $id2id[$element['#id']];

   885     }

   886     else {

   887       $js_id = 'oFCK_'. $num++;

   888       $id2id[$element['#id']] = $js_id;

   889     }

   890     $fckeditor_on = ($conf['default']=='t') ? 1 : 0 ;

   891 

   892     $xss_check = 0;

   893     //it's not a problem when adding new content/comment

   894     if (arg(1) != "add" && arg(1) != "reply") {

   895       $_fckeditor_configuration[$element['#id']] = $conf;

   896 

   897       //let FCKeditor know when perform XSS checks auto/manual

   898       if ($conf['ss'] == 1) {

   899         $xss_class = 'checkxss1';

   900       }

   901       else {

   902         $xss_class = 'checkxss2';

   903       }

   904 

   905       if (!isset($element['#attributes']['class'])) {

   906         $element['#attributes']['class'] = '';

   907       }

   908 

   909       $element['#attributes']['class'] .= ' '. $xss_class;

   910       $xss_check = 1;

   911     }

   912 

   913     $content = "";

   914     if (isset($element['#post']['teaser_js'])) {

   915       $content .= $element['#post']['teaser_js'] ."<!--break-->";

   916     }

   917     $content .= $element['#value'];

   918     $wysiwyg_link = "<div id=\"fck_{$js_id}\"><textarea id=\"{$js_id}\">". htmlspecialchars($content) ."</textarea></div>\n";

   919     $wysiwyg_link .= "<a href=\"javascript:Toggle('{$js_id}','{$element['#id']}','". str_replace("'", "\\'", t("Switch to plain text editor")) ."','". str_replace("'", "\\'", t("Switch to rich text editor")) ."',". $xss_check .");\" id=\"switch_{$js_id}\" ". ($fckeditor_on?"style=\"display:none\"":"") .">";

   920     $wysiwyg_link .= $fckeditor_on ? t("Switch to plain text editor") : t("Switch to rich text editor");

   921     $wysiwyg_link .= "</a>";

   922     if ($conf['show_toggle'] == 't' && !$processed) {

   923       drupal_add_js('if (Drupal.jsEnabled) {$(document).ready(function() {CreateToggle("'. $element['#id'] .'","'. $js_id .'", '. $fckeditor_on .');});}', 'inline');

   924     }

   925     //settings are saved as strings, not booleans

   926     if ($conf['show_toggle'] == 't') {

   927       // Make sure to append to #suffix so it isn't completely overwritten

   928       $element['#suffix'] .= $wysiwyg_link;

   929     }

   930     // setting some variables

   931     $module_drupal_path = drupal_get_path('module', 'fckeditor');

   932     $module_full_path = $host . $module_drupal_path;

   933     // get the default drupal files path

   934     $files_path = $host . file_directory_path();

   935     // module_drupal_path:

   936     //  'modules/fckeditor' (length=17)

   937     // module_full_path:

   938     //  '/drupal5/modules/fckeditor' (length=26)

   939     // files_path:

   940     //  '/drupal5/files' (length=14)

   941     // configured in settings

   942     $width = $conf['width'];

   943 

   944     // sensible default for small toolbars

   945     $height = $element['#rows'] * 14 + 140;

   946 

   947     if (!$is_running) {

   948       drupal_add_js($module_drupal_path .'/fckeditor/fckeditor.js');

   949       drupal_add_js($module_drupal_path .'/fckeditor.utils.js');

   950       $is_running = TRUE;

   951     }

   952 

   953     $toolbar = $conf['toolbar'];

   954     //$height += 100; // for larger toolbars

   955 

   956     $force_simple_toolbar = fckeditor_is_enabled(1, empty($conf['simple_incl_fields']) ? "" : $conf['simple_incl_fields'], empty($conf['simple_incl_paths']) ? "" : $conf['simple_incl_paths'], $element['#id'], $_GET['q']);

   957     if (!$force_simple_toolbar) {

   958       $force_simple_toolbar = fckeditor_is_enabled(1, empty($global_conf['simple_incl_fields']) ? "" : $global_conf['simple_incl_fields'], empty($global_conf['simple_incl_paths']) ? "" : $global_conf['simple_incl_paths'], $element['#id'], $_GET['q']);

   959     }

   960     if ($force_simple_toolbar) {

   961       $toolbar = FCKEDITOR_FORCE_SIMPLE_TOOLBAR_NAME;

   962     }

   963 

   964     if (!empty($conf['theme_config_js']) && $conf['theme_config_js'] == 't' && file_exists($themepath .'fckeditor.config.js')) {

   965       $fckeditor_config_path = $host . $themepath .'fckeditor.config.js?'. @filemtime($themepath .'fckeditor.config.js');

   966     }

   967     else {

   968       $fckeditor_config_path = $module_full_path ."/fckeditor.config.js?". @filemtime($module_drupal_path ."/fckeditor.config.js");

   969     }

   970 

   971     $textarea_id = $conf['show_toggle'] == 't' ? $js_id : $element['#id'];

   972     $_fckeditor_js_ids[$element['#id']] = $textarea_id;

   973     $js = $js_id ." = new FCKeditor( '". $textarea_id ."' );

   974 ". $js_id .".BasePath	= '". $module_full_path ."/fckeditor/';

   975 ". $js_id .".Config['CustomConfigurationsPath'] = \"". $fckeditor_config_path ."\";

   976 ". $js_id .".Config['TextareaID'] = \"". $element['#id'] ."\";";

   977 

   978     //if ($conf['appearance_conf'] == 'f') {

   979     $js .= "\n". $js_id .".ToolbarSet = \"". $toolbar ."\";

   980 ". $js_id .".Config['SkinPath'] = ". $js_id .".BasePath + \"editor/skins/". $conf['skin'] ."/\";

   981 ". $js_id .".Config['DefaultLanguage'] = \"". $conf['lang'] ."\";

   982 ". $js_id .".Config['AutoDetectLanguage'] = ". ($conf['auto_lang']=="t"?"true":"false") .";

   983 ". $js_id .".Height = \"". $height ."\";

   984 ". $js_id .".Config['ToolbarStartExpanded'] = ". ($conf['expand']=="t"?"true":"false") .";

   985 ". $js_id .".Width = \"". $width ."\";\n";

   986     //}

   987     //if ($conf['output_conf'] == 'f') {

   988     $js .= "\n". $js_id .".Config['EnterMode'] = '". $conf['enter_mode'] ."';

   989 ". $js_id .".Config['ShiftEnterMode'] = \"". $conf['shift_enter_mode'] ."\";

   990 ". $js_id .".Config['FontFormats'] = \"". str_replace(",", ";", $conf['font_format']) ."\";

   991 ". $js_id .".Config['FormatSource'] = ". ($conf['format_source']=="t"?"true":"false") .";

   992 ". $js_id .".Config['FormatOutput'] = ". ($conf['format_output']=="t"?"true":"false") .";\n";

   993     //}

   994 

   995     if (function_exists('img_assist_perm')) { //#275158

   996       drupal_add_js("var fckImgAssistPath = '". base_path() . drupal_get_path('module', 'img_assist') ."';", 'inline');

   997     }

   998     // add code for filebrowser for users that have access

   999     if (user_access('allow fckeditor file uploads')==1) {

  1000       $filebrowser = !empty($conf['filebrowser']) ? $conf['filebrowser'] : 'none';

  1001       if ($filebrowser == 'imce' && !module_exists('imce')) {

  1002         $filebrowser = 'none';

  1003       }

  1004       if ($filebrowser == 'ib' && !module_exists('imagebrowser')) {

  1005         $filebrowser = 'none';

  1006       }

  1007       if ($filebrowser == 'webfm' && !module_exists('webfm_popup')) {

  1008         $filebrowser = 'none';

  1009       }

  1010       $quickupload = (!empty($conf['quickupload']) && $conf['quickupload'] == 't');

  1011 

  1012       // load variables used by both quick upload and filebrowser

  1013       // and assure that the $_SESSION variables are loaded

  1014       if ($quickupload || $filebrowser == 'builtin') {

  1015 

  1016         $connector_path = $module_drupal_path ."/fckeditor/editor/filemanager/connectors/php/connector.php";

  1017         if (file_exists($connector_path)) {

  1018           //FCKeditor 2.5 and above

  1019           $connector_path = $module_full_path ."/fckeditor/editor/filemanager/connectors/php/connector.php";

  1020         }

  1021         else {

  1022           //FCKeditor 2.4.3-

  1023           $connector_path = "connectors/php/connector.php";

  1024         }

  1025         $upload_path = $module_drupal_path ."/fckeditor/editor/filemanager/connectors/php/upload.php";

  1026         if (file_exists($upload_path)) {

  1027           //FCKeditor 2.5 and above

  1028           $upload_path = $module_full_path ."/fckeditor/editor/filemanager/connectors/php/upload.php";

  1029         }

  1030         else {

  1031           //FCKeditor 2.4.3-

  1032           $upload_path = "/fckeditor/editor/filemanager/upload/php/upload.php";

  1033         }

  1034 

  1035         if (!empty($profile->settings['UserFilesPath'])) $_SESSION['FCKeditor']['UserFilesPath'] = strtr($profile->settings['UserFilesPath'], array("%f" => file_directory_path(), "%u" => $user->uid, "%b" => $host));

  1036         if (!empty($profile->settings['UserFilesAbsolutePath'])) $_SESSION['FCKeditor']['UserFilesAbsolutePath'] = strtr($profile->settings['UserFilesAbsolutePath'], array("%f" => file_directory_path(), "%u" => $user->uid, "%b" => base_path(), "%d" => $_SERVER['DOCUMENT_ROOT']));

  1037         if (variable_get('file_downloads', '') == FILE_DOWNLOADS_PRIVATE) {

  1038           $private_dir = trim(isset($global_profile->settings['private_dir']) ? $global_profile->settings['private_dir'] : "", "/\\");

  1039           if (strlen($private_dir)) {

  1040             $_SESSION['FCKeditor']['UserFilesPath'] = url('system/files') .'/'. $private_dir .'/';

  1041             $_SESSION['FCKeditor']['UserFilesAbsolutePath'] = realpath(file_directory_path()) . DIRECTORY_SEPARATOR . $private_dir . DIRECTORY_SEPARATOR;

  1042           }

  1043           else {

  1044             $_SESSION['FCKeditor']['UserFilesPath'] = url('system/files') .'/';

  1045             $_SESSION['FCKeditor']['UserFilesAbsolutePath'] = realpath(file_directory_path()) . DIRECTORY_SEPARATOR;

  1046           }

  1047         }

  1048       }

  1049 

  1050       if ($quickupload) {

  1051         $js .= $js_id .".Config['LinkUpload'] = true;\n";

  1052         $js .= $js_id .".Config['ImageUpload'] = true;\n";

  1053         $js .= $js_id .".Config['FlashUpload'] = true;\n";

  1054         $js .= $js_id .".Config['LinkUploadURL'] = '". $upload_path ."';\n";

  1055         $js .= $js_id .".Config['ImageUploadURL'] = '". $upload_path ."?Type=Image';\n";

  1056         $js .= $js_id .".Config['FlashUploadURL'] = '". $upload_path ."?Type=Flash';\n";

  1057       }

  1058       else {

  1059         $js .= $js_id .".Config['LinkUpload'] = false;\n";

  1060         $js .= $js_id .".Config['ImageUpload'] = false;\n";

  1061         $js .= $js_id .".Config['FlashUpload'] = false;\n";

  1062       }

  1063 

  1064       switch ($filebrowser) {

  1065         case 'imce':

  1066           $js .= $js_id .".Config['LinkBrowser']= true;\n";

  1067           $js .= $js_id .".Config['ImageBrowser']= true;\n";

  1068           $js .= $js_id .".Config['FlashBrowser']= true;\n";

  1069           $js .= $js_id .".Config['LinkBrowserURL']= '". $host ."index.php?q=imce&app=FCKEditor|url@txtUrl';\n";

  1070           $js .= $js_id .".Config['ImageBrowserURL']= '". $host ."index.php?q=imce&app=FCKEditor|url@txtUrl|width@txtWidth|height@txtHeight';\n";

  1071           $js .= $js_id .".Config['FlashBrowserURL']= '". $host ."index.php?q=imce&app=FCKEditor|url@txtUrl';\n";

  1072           break;

  1073         case 'builtin':

  1074           $js .= $js_id .".Config['LinkBrowser'] = true;\n";

  1075           $js .= $js_id .".Config['ImageBrowser'] = true;\n";

  1076           $js .= $js_id .".Config['FlashBrowser'] = true;\n";

  1077           $js .= $js_id .".Config['LinkBrowserURL'] = '". $module_full_path ."/fckeditor/editor/filemanager/browser/default/browser.html?Connector=". $connector_path ."&ServerPath=". $files_path ."';\n";

  1078           $js .= $js_id .".Config['ImageBrowserURL'] = '". $module_full_path ."/fckeditor/editor/filemanager/browser/default/browser.html?Type=Image&Connector=". $connector_path ."&ServerPath=". $files_path ."';\n";

  1079           $js .= $js_id .".Config['FlashBrowserURL'] = '". $module_full_path ."/fckeditor/editor/filemanager/browser/default/browser.html?Type=Flash&Connector=". $connector_path ."&ServerPath=". $files_path ."';\n";

  1080           break;

  1081         case 'ib':

  1082           $js .= $js_id .".Config['ImageBrowser']= true;\n";

  1083           $js .= $js_id .".Config['LinkBrowser']= true;\n";

  1084           $js .= $js_id .".Config['FlashBrowser']= false;\n";

  1085           $js .= $js_id .".Config['ImageBrowserURL']= '". $host ."index.php?q=imagebrowser/view/browser&app=FCKEditor';\n";

  1086           $js .= $js_id .".Config['LinkBrowserURL']= '". $host ."index.php?q=imagebrowser/view/browser&app=FCKEditor';\n";

  1087           $js .= $js_id .".Config['ImageBrowserWindowWidth']= '680';";

  1088           $js .= $js_id .".Config['ImageBrowserWindowHeight'] = '439';";

  1089           $js .= $js_id .".Config['LinkBrowserWindowWidth']= '680';";

  1090           $js .= $js_id .".Config['LinkBrowserWindowHeight'] = '439';";

  1091           break;

  1092         case 'webfm':

  1093           $js .= $js_id .".Config['LinkBrowser']= true;\n";

  1094           $js .= $js_id .".Config['ImageBrowser']= true;\n";

  1095           $js .= $js_id .".Config['FlashBrowser']= true;\n";

  1096           $js .= $js_id .".Config['ImageDlgHideLink']= true;\n";

  1097           $js .= $js_id .".Config['LinkBrowserURL']= '". $host ."index.php?q=webfm_popup&url=txtUrl';\n";

  1098           $js .= $js_id .".Config['ImageBrowserURL']= '". $host ."index.php?q=webfm_popup&url=txtUrl';\n";

  1099           $js .= $js_id .".Config['FlashBrowserURL']= '". $host ."index.php?q=webfm_popup&url=txtUrl';\n";

  1100           break;

  1101         default:

  1102         case 'none':

  1103           $js .= $js_id .".Config['LinkBrowser'] = false;\n";

  1104           $js .= $js_id .".Config['ImageBrowser'] = false;\n";

  1105           $js .= $js_id .".Config['FlashBrowser'] = false;\n";

  1106           break;

  1107       }

  1108     }

  1109     else {

  1110       $js .= $js_id .".Config['LinkBrowser'] = false;\n";

  1111       $js .= $js_id .".Config['ImageBrowser'] = false;\n";

  1112       $js .= $js_id .".Config['FlashBrowser'] = false;\n";

  1113       $js .= $js_id .".Config['LinkUpload'] = false;\n";

  1114       $js .= $js_id .".Config['ImageUpload'] = false;\n";

  1115       $js .= $js_id .".Config['FlashUpload'] = false;\n";

  1116     }

  1117 

  1118     if (!empty($conf['js_conf'])) {

  1119       $lines = preg_split("/[\n\r]+/", $conf['js_conf']);

  1120       foreach ($lines as $l)

  1121       if ($l && strlen($l) > 5) {

  1122         $eqpos = strpos($l, "=");

  1123         if (false !== $eqpos) {

  1124           $option = str_replace("FCKConfig.", "", substr($l, 0, $eqpos));

  1125           $js .= "\n". $js_id .".Config['". trim($option) ."'] =". substr($l, $eqpos + 1);

  1126         }

  1127       }

  1128     }

  1129 

  1130     // add custom xml stylesheet if it exists

  1131     if (!empty($conf['css_style']) && $conf['css_style'] == 'theme') {

  1132       if (file_exists($themepath .'fckstyles.xml')) {

  1133         $styles_xml_path = $host . $themepath .'fckstyles.xml';

  1134         $js .= $js_id .".Config['StylesXmlPath'] = \"". $styles_xml_path ."\";\n";

  1135       }