if ($User->admin and preg_match('/\A<[a-z][^>]*>/', $input)) {
return $input; # allow html input as is if privileged
}
- $html = preg_replace(
- ["/\r\n?/", "/ +\n/", "/\n/", '/\b_(\w+)_\b/'],
- ["\n", "<br />", "</p>\n<p>", '<em>$1</em>' ],
- htmlspecialchars($input)
- );
+ $markup = [
+ "/\r\n?/" => "\n", # unix newlines
+ "/ +\n/" => "<br />", # trailing spaces for hard line break
+ "/\n/" => "</p>\n<p>", # newlines start paragraphs
+ '/\b_(\w+)_\b/' => '<em>$1</em>', # italic
+ '/\b\*(\w+)\*\b/' => '<strong>$1</strong>', # bold
+ ];
+ $html = preg_replace(array_keys($markup), array_values($markup), htmlspecialchars($input));
return "<p>$html</p>";
}