GDRCD 5.6 // abilità cliccabile in chat

function gdrcd_html_filter($str)
{
$notAllowed = [
"#<script(.*?)>(.*?)</script>#is" => "Script non consentiti",
"#(<iframe.*?\/?>.*?(<\/iframe>)?)#is" => "Frame non consentiti",
"#(<object.*?>.*?(<\/object>)?)#is" => "Contenuti multimediali non consentiti",
"#(<embed.*?\/?>.*?(<\/embed>)?)#is" => "Contenuti multimediali non consentiti",
"#\bon([a-z]*?)=(['|\"])(.*?)\\2#mi" => " ",
"#(javascript:[^\s\"']+)#is" => ""
];

// Mantieni i tag <a> e l'attributo href
$str = preg_replace('#<a\s+href=["\'](.*?)["\'].*?>(.*?)</a>#is', '<a href="\1" class="skill-link">\2</a>', $str);




return preg_replace(array_keys($notAllowed), array_values($notAllowed), $str);
}

function gdrcd_skill_links($message) {
// Recupera le skill dal database
$skills = [];
$result = gdrcd_query("SELECT id_abilita,nome,url FROM abilita", 'result');
while ($row = gdrcd_query($result, 'fetch')) {
$skills[$row['nome']] = $row['url'];
}
gdrcd_query($result, 'free');


// Scansiona il messaggio e sostituisci le skill con i link
foreach ($skills as $skill => $url) {
$pattern = '/\b' . preg_quote($skill, '/') . '\b/i';
$replacement = '<a href="' . htmlspecialchars($url) . '" class="skill-link" " target="_blank">'
. htmlspecialchars($skill) . '</a>';
$message = preg_replace($pattern, $replacement, $message);
}
return $message;
}

$testo = gdrcd_skill_links(
"{$_SESSION['login']} "
.gdrcd_filter('in', $MESSAGE['chat']['commands']['use_skills']['uses'])." "
.gdrcd_filter('in', "<a href='#' onclick='openSkillPopup()'>"
. gdrcd_filter('in', $skill['nome']) . "</a>")
." di rango {$rank['grado']} "
.gdrcd_filter('in', $MESSAGE['chat']['commands']['use_skills']['with'])." "
.gdrcd_filter('in', $PARAMETERS['names']['stats']['car'.$skill['car'].''])." {$car_value}. "
.gdrcd_filter('in', $MESSAGE['chat']['commands']['use_skills']['d20'])." {$die}. "
.gdrcd_filter("in", $MESSAGE['chat']['commands']['die']['sum']).": {$risultato}"
);

' <a href="#" onclick="modalWindow("descab", "'.$skill["nome"].'", "popup_skill.php?id='.$skill["id_abilita"].'", 800, 300); return false;">' .
gdrcd_filter('in', $skill['nome']) .
'</a>: '