lib/htmlpurifier/HTMLPurifier/AttrDef/URI/IPv6.php

   1 <?php
   2
   3 require_once 'HTMLPurifier/AttrDef/URI/IPv4.php';
   4
   5 /**
   6  * Validates an IPv6 address.
   7  * @author Feyd @ forums.devnetwork.net (public domain)
   8  * @note This function requires brackets to have been removed from address
   9  *       in URI.
  10  */
  11 class HTMLPurifier_AttrDef_URI_IPv6 extends HTMLPurifier_AttrDef_URI_IPv4
  12 {
  13
  14     function validate($aIP, $config, &$context) {
  15
  16         if (!$this->ip4) $this->_loadRegex();
  17
  18         $original = $aIP;
  19
  20         $hex = '[0-9a-fA-F]';
  21         $blk = '(?:' . $hex . '{1,4})';
  22         $pre = '(?:/(?:12[0-8]|1[0-1][0-9]|[1-9][0-9]|[0-9]))';   // /0 - /128
  23
  24         //      prefix check
  25         if (strpos($aIP, '/') !== false)
  26         {
  27                 if (preg_match('#' . $pre . '$#s', $aIP, $find))
  28                 {
  29                         $aIP = substr($aIP, 0, 0-strlen($find[0]));
  30                         unset($find);
  31                 }
  32                 else
  33                 {
  34                         return false;
  35                 }
  36         }
  37
  38         //      IPv4-compatiblity check
  39         if (preg_match('#(?<=:'.')' . $this->ip4 . '$#s', $aIP, $find))
  40         {
  41                 $aIP = substr($aIP, 0, 0-strlen($find[0]));
  42                 $ip = explode('.', $find[0]);
  43                 $ip = array_map('dechex', $ip);
  44                 $aIP .= $ip[0] . $ip[1] . ':' . $ip[2] . $ip[3];
  45                 unset($find, $ip);
  46         }
  47
  48         //      compression check
  49         $aIP = explode('::', $aIP);
  50         $c = count($aIP);
  51         if ($c > 2)
  52         {
  53                 return false;
  54         }
  55         elseif ($c == 2)
  56         {
  57                 list($first, $second) = $aIP;
  58                 $first = explode(':', $first);
  59                 $second = explode(':', $second);
  60
  61                 if (count($first) + count($second) > 8)
  62                 {
  63                         return false;
  64                 }
  65
  66                 while(count($first) < 8)
  67                 {
  68                         array_push($first, '0');
  69                 }
  70
  71                 array_splice($first, 8 - count($second), 8, $second);
  72                 $aIP = $first;
  73                 unset($first,$second);
  74         }
  75         else
  76         {
  77                 $aIP = explode(':', $aIP[0]);
  78         }
  79         $c = count($aIP);
  80
  81         if ($c != 8)
  82         {
  83                 return false;
  84         }
  85
  86         //      All the pieces should be 16-bit hex strings. Are they?
  87         foreach ($aIP as $piece)
  88         {
  89                 if (!preg_match('#^[0-9a-fA-F]{4}$#s', sprintf('%04s', $piece)))
  90                 {
  91                         return false;
  92                 }
  93         }
  94
  95         return $original;
  96
  97     }
  98
  99 }
 100