save_error_log.php

<?php
	$GLOBALS["allowed_types"] = ['table', 'tr', 'td', 'th', 'span', 'pre', 'tbody', 'h1', 'h2', 'h3', 'img'];

	include_once('functions.php');

	function checkElementsInAllowedTypes($string) {
		// Define the allowed element types

		// Use a regular expression to find all opening and closing tags
		preg_match_all('/<\/?(.*?)>/', $string, $matches);

		if (empty($matches[1])) {
			return [];
		}

		$unallowed_tags = [];

		// Iterate through the matched elements
		foreach ($matches[1] as $element) {
			// Convert the element type to lowercase for case-insensitive comparison
			$element = strtolower($element);

			// Check if the element type is not in the allowed types
			if (!in_array($element, $GLOBALS["allowed_types"])) {
				$unallowed_tags[] = $element;
			}
		}

		return $unallowed_tags;
	}

	function receiveAndCheckHTML($log_file_dir, $html_code) {
		// Create an array to store error messages
		$error_messages = array();

		// Check if the log file directory is readable and writable
		if (!is_dir($log_file_dir) || !is_readable($log_file_dir) || !is_writable($log_file_dir)) {
			$error_messages[] = "Log file directory $log_file_dir is not readable or writable.";
		} else {
			try {
				// Generate a unique filename for the HTML file
				$filename = uniqid() . '.html';

				// Check if the filtered HTML is empty (no allowed types)
				$unallowed_tags = checkElementsInAllowedTypes($html_code);
				if (count($unallowed_tag)) {
					$error_messages[] = "Contains unallowed_tag: ".join($unallowed_tags, ", ")." , allowed, (".join($GLOBALS["allowed_types"], ", ").").";
				} else {
					// Save the filtered HTML to the log file directory
					$file_path = $log_file_dir . '/' . $filename;
					file_put_contents($file_path, $html_code);

					if (file_exists($file_path)) {
						$success_message = "HTML code saved successfully.";
						$response = array("status" => "success", "message" => $success_message);
						echo json_encode($response);
					} else {
						$error_messages[] = "Failed to save HTML code to the log file directory.";
					}
				}
			} catch (Exception $e) {
				$error_messages[] = "An error occurred while saving the HTML code.";
			}
		}

		// Log and return error messages in JSON format
		$response = array("status" => "error", "errors" => $error_messages, ", ");
		echo json_encode($response);
	}

	// Example usage:
	if (isset($_SERVER["REQUEST_METHOD"])) {
		if ($_SERVER["REQUEST_METHOD"] === "POST") {
			$html_code = $_POST["html_code"];
			if ($html_code !== false) {
				$log_file_dir = "debuglogs";
				receiveAndCheckHTML($log_file_dir, $html_code);
			} else {
				echo json_encode(array("error" => "post html_code was not set"));
			}
		} else {
			echo json_encode(array("error" => "was not requested with post"));
		}
	} else {
		echo json_encode(array("error" => "could not find request method"));
	}
?>