0
+ − 1
<?php
73
0a74676a2f2f
Made the move to Loch Ness, and got some basic page grouping functionality working. TODO: fix some UI issues in Javascript ACL editor and change non-JS ACL editor to work with page groups too
Dan
diff
changeset
+ − 2
167
+ − 3
/*
0
+ − 4
* Enano - an open-source CMS capable of wiki functions, Drupal-like sidebar blocks, and everything in between
167
+ − 5
* Version 1.0.2 (Coblynau)
0
+ − 6
* Copyright (C) 2006-2007 Dan Fuhry
+ − 7
*
+ − 8
* This program is Free Software; you can redistribute and/or modify it under the terms of the GNU General Public License
+ − 9
* as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.
+ − 10
*
+ − 11
* This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied
+ − 12
* warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for details.
+ − 13
*
+ − 14
*/
70
+ − 15
81
d7fc25acd3f3
Replaced the menu in the admin theme with something much more visually pleasureable; minor fix in Special:UploadFile; finished patching a couple of XSS problems from Banshee; finished Admin:PageGroups; removed unneeded code in flyin.js; finished tag system (except tag cloud); 1.0.1 release candidate
Dan
diff
changeset
+ − 16
// Set up gzip encoding before any output is sent
42
45ebe475ff75
I dunno how many times I'm gonna have to fix the "problem seems to be the hex conversion" bug, but this is at least the fourth try.
Dan
diff
changeset
+ − 17
170
4c5c2b66a34d
SECURITY: remove debug message in session manager; implemented alternate MediaWiki syntax for template embedding; added Adobe Spry for "shake" effect on unsuccessful login
Dan
diff
changeset
+ − 18
$aggressive_optimize_html = false;
42
45ebe475ff75
I dunno how many times I'm gonna have to fix the "problem seems to be the hex conversion" bug, but this is at least the fourth try.
Dan
diff
changeset
+ − 19
0
+ − 20
global $do_gzip;
80
cb7dde69c301
Improved and enabled HTML optimization algorithm; enabled gzip compression; added but did not test at all the tag cloud class in includes/tagcloud.php, this is still very preliminary and not ready for any type of production use
Dan
diff
changeset
+ − 21
$do_gzip = true;
42
45ebe475ff75
I dunno how many times I'm gonna have to fix the "problem seems to be the hex conversion" bug, but this is at least the fourth try.
Dan
diff
changeset
+ − 22
0
+ − 23
if(isset($_SERVER['PATH_INFO'])) $v = $_SERVER['PATH_INFO'];
+ − 24
elseif(isset($_GET['title'])) $v = $_GET['title'];
+ − 25
else $v = '';
42
45ebe475ff75
I dunno how many times I'm gonna have to fix the "problem seems to be the hex conversion" bug, but this is at least the fourth try.
Dan
diff
changeset
+ − 26
80
cb7dde69c301
Improved and enabled HTML optimization algorithm; enabled gzip compression; added but did not test at all the tag cloud class in includes/tagcloud.php, this is still very preliminary and not ready for any type of production use
Dan
diff
changeset
+ − 27
if ( isset($_GET['nocompress']) )
cb7dde69c301
Improved and enabled HTML optimization algorithm; enabled gzip compression; added but did not test at all the tag cloud class in includes/tagcloud.php, this is still very preliminary and not ready for any type of production use
Dan
diff
changeset
+ − 28
$aggressive_optimize_html = false;
cb7dde69c301
Improved and enabled HTML optimization algorithm; enabled gzip compression; added but did not test at all the tag cloud class in includes/tagcloud.php, this is still very preliminary and not ready for any type of production use
Dan
diff
changeset
+ − 29
0
+ − 30
error_reporting(E_ALL);
42
45ebe475ff75
I dunno how many times I'm gonna have to fix the "problem seems to be the hex conversion" bug, but this is at least the fourth try.
Dan
diff
changeset
+ − 31
0
+ − 32
// if(!strstr($v, 'CSS') && !strstr($v, 'UploadFile') && !strstr($v, 'DownloadFile')) // These pages are blacklisted because we can't have debugConsole's HTML output disrupting the flow of header() calls and whatnot
+ − 33
// {
+ − 34
// $do_gzip = ( function_exists('gzcompress') && ( isset($_SERVER['HTTP_ACCEPT_ENCODING']) && strstr($_SERVER['HTTP_ACCEPT_ENCODING'], 'gzip') ) ) ? true : false;
+ − 35
// // Uncomment the following line to enable debugConsole (requires PHP 5 or later)
+ − 36
// // define('ENANO_DEBUG', '');
+ − 37
// }
42
45ebe475ff75
I dunno how many times I'm gonna have to fix the "problem seems to be the hex conversion" bug, but this is at least the fourth try.
Dan
diff
changeset
+ − 38
0
+ − 39
if(defined('ENANO_DEBUG')) $do_gzip = false;
42
45ebe475ff75
I dunno how many times I'm gonna have to fix the "problem seems to be the hex conversion" bug, but this is at least the fourth try.
Dan
diff
changeset
+ − 40
0
+ − 41
if($aggressive_optimize_html || $do_gzip)
+ − 42
{
+ − 43
ob_start();
+ − 44
}
42
45ebe475ff75
I dunno how many times I'm gonna have to fix the "problem seems to be the hex conversion" bug, but this is at least the fourth try.
Dan
diff
changeset
+ − 45
0
+ − 46
require('includes/common.php');
42
45ebe475ff75
I dunno how many times I'm gonna have to fix the "problem seems to be the hex conversion" bug, but this is at least the fourth try.
Dan
diff
changeset
+ − 47
0
+ − 48
global $db, $session, $paths, $template, $plugins; // Common objects
42
45ebe475ff75
I dunno how many times I'm gonna have to fix the "problem seems to be the hex conversion" bug, but this is at least the fourth try.
Dan
diff
changeset
+ − 49
0
+ − 50
if(!isset($_GET['do'])) $_GET['do'] = 'view';
+ − 51
switch($_GET['do'])
+ − 52
{
+ − 53
default:
+ − 54
die_friendly('Invalid action', '<p>The action "'.$_GET['do'].'" is not defined. Return to <a href="'.makeUrl($paths->page).'">viewing this page\'s text</a>.</p>');
+ − 55
break;
+ − 56
case 'view':
+ − 57
// echo PageUtils::getpage($paths->page, true, ( (isset($_GET['oldid'])) ? $_GET['oldid'] : false ));
21
663fcf528726
Updated all version numbers back to Banshee; a few preliminary steps towards full UTF-8 support in page URLs
Dan
diff
changeset
+ − 58
$rev_id = ( (isset($_GET['oldid'])) ? intval($_GET['oldid']) : 0 );
663fcf528726
Updated all version numbers back to Banshee; a few preliminary steps towards full UTF-8 support in page URLs
Dan
diff
changeset
+ − 59
$page = new PageProcessor( $paths->cpage['urlname_nons'], $paths->namespace, $rev_id );
0
+ − 60
$page->send_headers = true;
32
4d87aad3c4c0
Finished everything on the TODO list (yay!); several CSS cleanups; tons more changes in this commit - see the patch for details
Dan
diff
changeset
+ − 61
$pagepass = ( isset($_REQUEST['pagepass']) ) ? sha1($_REQUEST['pagepass']) : '';
4d87aad3c4c0
Finished everything on the TODO list (yay!); several CSS cleanups; tons more changes in this commit - see the patch for details
Dan
diff
changeset
+ − 62
$page->password = $pagepass;
61
+ − 63
$page->send(true);
0
+ − 64
break;
+ − 65
case 'comments':
+ − 66
$template->header();
+ − 67
$sub = ( isset ($_GET['sub']) ) ? $_GET['sub'] : false;
+ − 68
switch($sub)
+ − 69
{
+ − 70
case 'admin':
+ − 71
default:
+ − 72
$act = ( isset ($_GET['action']) ) ? $_GET['action'] : false;
+ − 73
$id = ( isset ($_GET['id']) ) ? intval($_GET['id']) : -1;
+ − 74
echo PageUtils::comments_html($paths->cpage['urlname_nons'], $paths->namespace, $act, Array('id'=>$id));
+ − 75
break;
+ − 76
case 'postcomment':
+ − 77
if(empty($_POST['name']) ||
+ − 78
empty($_POST['subj']) ||
+ − 79
empty($_POST['text'])
+ − 80
) { echo 'Invalid request'; break; }
+ − 81
$cid = ( isset($_POST['captcha_id']) ) ? $_POST['captcha_id'] : false;
+ − 82
$cin = ( isset($_POST['captcha_input']) ) ? $_POST['captcha_input'] : false;
+ − 83
PageUtils::addcomment($paths->cpage['urlname_nons'], $paths->namespace, $_POST['name'], $_POST['subj'], $_POST['text'], $cin, $cid); // All filtering, etc. is handled inside this method
+ − 84
echo PageUtils::comments_html($paths->cpage['urlname_nons'], $paths->namespace);
+ − 85
break;
+ − 86
case 'editcomment':
+ − 87
if(!isset($_GET['id']) || ( isset($_GET['id']) && !preg_match('#^([0-9]+)$#', $_GET['id']) )) { echo '<p>Invalid comment ID</p>'; break; }
+ − 88
$q = $db->sql_query('SELECT subject,comment_data,comment_id FROM '.table_prefix.'comments WHERE comment_id='.$_GET['id']);
+ − 89
if(!$q) $db->_die('The comment data could not be selected.');
+ − 90
$row = $db->fetchrow();
+ − 91
$db->free_result();
+ − 92
echo '<form action="'.makeUrl($paths->page, 'do=comments&sub=savecomment').'" method="post">';
+ − 93
echo "<br /><div class='tblholder'><table border='0' width='100%' cellspacing='1' cellpadding='4'>
+ − 94
<tr><td class='row1'>Subject:</td><td class='row1'><input type='text' name='subj' value='{$row['subject']}' /></td></tr>
+ − 95
<tr><td class='row2'>Comment:</td><td class='row2'><textarea rows='10' cols='40' style='width: 98%;' name='text'>{$row['comment_data']}</textarea></td></tr>
+ − 96
<tr><td class='row1' colspan='2' class='row1' style='text-align: center;'><input type='hidden' name='id' value='{$row['comment_id']}' /><input type='submit' value='Save Changes' /></td></tr>
+ − 97
</table></div>";
+ − 98
echo '</form>';
+ − 99
break;
+ − 100
case 'savecomment':
+ − 101
if(empty($_POST['subj']) || empty($_POST['text'])) { echo '<p>Invalid request</p>'; break; }
+ − 102
$r = PageUtils::savecomment_neater($paths->cpage['urlname_nons'], $paths->namespace, $_POST['subj'], $_POST['text'], (int)$_POST['id']);
+ − 103
if($r != 'good') { echo "<pre>$r</pre>"; break; }
+ − 104
echo PageUtils::comments_html($paths->cpage['urlname_nons'], $paths->namespace);
+ − 105
break;
+ − 106
case 'deletecomment':
+ − 107
if(!empty($_GET['id']))
+ − 108
{
+ − 109
PageUtils::deletecomment_neater($paths->cpage['urlname_nons'], $paths->namespace, (int)$_GET['id']);
+ − 110
}
+ − 111
echo PageUtils::comments_html($paths->cpage['urlname_nons'], $paths->namespace);
+ − 112
break;
+ − 113
}
+ − 114
$template->footer();
+ − 115
break;
+ − 116
case 'edit':
+ − 117
if(isset($_POST['_cancel'])) { header('Location: '.makeUrl($paths->page)); echo '<html><head><title>Redirecting...</title></head><body>If you haven\'t been redirected yet, <a href="'.makeUrl($paths->page).'">click here</a>.'; break; }
+ − 118
if(isset($_POST['_save'])) {
+ − 119
$e = PageUtils::savepage($paths->cpage['urlname_nons'], $paths->namespace, $_POST['page_text'], $_POST['edit_summary'], isset($_POST['minor']));
+ − 120
header('Location: '.makeUrl($paths->page)); echo '<html><head><title>Redirecting...</title></head><body>If you haven\'t been redirected yet, <a href="'.makeUrl($paths->page).'">click here</a>.'; break;
+ − 121
}
+ − 122
$template->header();
+ − 123
if(isset($_POST['_preview']))
+ − 124
{
+ − 125
$text = $_POST['page_text'];
+ − 126
echo PageUtils::genPreview($_POST['page_text']);
+ − 127
}
+ − 128
else $text = RenderMan::getPage($paths->cpage['urlname_nons'], $paths->namespace, 0, false, false, false, false);
+ − 129
echo '
+ − 130
<form action="'.makeUrl($paths->page, 'do=edit').'" method="post" enctype="multipart/form-data">
+ − 131
<br />
+ − 132
<textarea name="page_text" rows="20" cols="60" style="width: 97%;">'.$text.'</textarea><br />
+ − 133
<br />
+ − 134
';
+ − 135
if($paths->wiki_mode)
42
45ebe475ff75
I dunno how many times I'm gonna have to fix the "problem seems to be the hex conversion" bug, but this is at least the fourth try.
Dan
diff
changeset
+ − 136
echo 'Edit summary: <input name="edit_summary" type="text" size="40" /><br /><label><input type="checkbox" name="minor" /> This is a minor edit</label><br />';
0
+ − 137
echo '<br />
+ − 138
<input type="submit" name="_save" value="Save changes" style="font-weight: bold;" />
+ − 139
<input type="submit" name="_preview" value="Preview changes" />
+ − 140
<input type="submit" name="_revert" value="Revert changes" />
+ − 141
<input type="submit" name="_cancel" value="Cancel" />
+ − 142
</form>
+ − 143
';
159
+ − 144
if ( getConfig('wiki_edit_notice') == '1' )
+ − 145
{
+ − 146
$notice = getConfig('wiki_edit_notice_text');
+ − 147
echo RenderMan::render($notice);
+ − 148
}
0
+ − 149
$template->footer();
+ − 150
break;
+ − 151
case 'viewsource':
+ − 152
$template->header();
+ − 153
$text = RenderMan::getPage($paths->cpage['urlname_nons'], $paths->namespace, 0, false, false, false, false);
+ − 154
echo '
+ − 155
<form action="'.makeUrl($paths->page, 'do=edit').'" method="post">
+ − 156
<br />
+ − 157
<textarea readonly="readonly" name="page_text" rows="20" cols="60" style="width: 97%;">'.$text.'</textarea>';
+ − 158
echo '<br />
+ − 159
<input type="submit" name="_cancel" value="Close viewer" />
+ − 160
</form>
+ − 161
';
+ − 162
$template->footer();
+ − 163
break;
+ − 164
case 'history':
+ − 165
$hist = PageUtils::histlist($paths->cpage['urlname_nons'], $paths->namespace);
+ − 166
$template->header();
+ − 167
echo $hist;
+ − 168
$template->footer();
+ − 169
break;
+ − 170
case 'rollback':
+ − 171
$id = (isset($_GET['id'])) ? $_GET['id'] : false;
+ − 172
if(!$id || !preg_match('#^([0-9]+)$#', $id)) die_friendly('Invalid action ID', '<p>The URL parameter "id" is not an integer. Exiting to prevent nasties like SQL injection, etc.</p>');
+ − 173
$rb = PageUtils::rollback( (int) $id );
+ − 174
$template->header();
+ − 175
echo '<p>'.$rb.' <a href="'.makeUrl($paths->page).'">Return to the page</a>.</p>';
+ − 176
$template->footer();
+ − 177
break;
+ − 178
case 'catedit':
+ − 179
if(isset($_POST['__enanoSaveButton']))
+ − 180
{
+ − 181
unset($_POST['__enanoSaveButton']);
+ − 182
$val = PageUtils::catsave($paths->cpage['urlname_nons'], $paths->namespace, $_POST);
+ − 183
if($val == 'GOOD')
+ − 184
{
+ − 185
header('Location: '.makeUrl($paths->page)); echo '<html><head><title>Redirecting...</title></head><body>If you haven\'t been redirected yet, <a href="'.makeUrl($paths->page).'">click here</a>.'; break;
+ − 186
} else {
+ − 187
die_friendly('Error saving category information', '<p>'.$val.'</p>');
+ − 188
}
+ − 189
}
+ − 190
elseif(isset($_POST['__enanoCatCancel']))
+ − 191
{
+ − 192
header('Location: '.makeUrl($paths->page)); echo '<html><head><title>Redirecting...</title></head><body>If you haven\'t been redirected yet, <a href="'.makeUrl($paths->page).'">click here</a>.'; break;
+ − 193
}
+ − 194
$template->header();
+ − 195
$c = PageUtils::catedit_raw($paths->cpage['urlname_nons'], $paths->namespace);
+ − 196
echo $c[1];
+ − 197
$template->footer();
+ − 198
break;
+ − 199
case 'moreoptions':
+ − 200
$template->header();
32
4d87aad3c4c0
Finished everything on the TODO list (yay!); several CSS cleanups; tons more changes in this commit - see the patch for details
Dan
diff
changeset
+ − 201
echo '<div class="menu_nojs" style="width: 150px; padding: 0;"><ul style="display: block;"><li><div class="label">More options for this page</div><div style="clear: both;"></div></li>'.$template->tpl_strings['TOOLBAR_EXTRAS'].'</ul></div>';
0
+ − 202
$template->footer();
+ − 203
break;
+ − 204
case 'protect':
+ − 205
if (!isset($_REQUEST['level'])) die_friendly('Invalid request', '<p>No protection level specified</p>');
+ − 206
if(!empty($_POST['reason']))
+ − 207
{
+ − 208
if(!preg_match('#^([0-2]*){1}$#', $_POST['level'])) die_friendly('Error protecting page', '<p>Request validation failed</p>');
+ − 209
PageUtils::protect($paths->cpage['urlname_nons'], $paths->namespace, intval($_POST['level']), $_POST['reason']);
+ − 210
die_friendly('Page protected', '<p>The protection setting has been applied. <a href="'.makeUrl($paths->page).'">Return to the page</a>.</p>');
+ − 211
}
+ − 212
$template->header();
+ − 213
?>
+ − 214
<form action="<?php echo makeUrl($paths->page, 'do=protect'); ?>" method="post">
+ − 215
<input type="hidden" name="level" value="<?php echo $_REQUEST['level']; ?>" />
+ − 216
<?php if(isset($_POST['reason'])) echo '<p style="color: red;">Error: you must enter a reason for protecting this page.</p>'; ?>
+ − 217
<p>Reason for protecting the page:</p>
+ − 218
<p><input type="text" name="reason" size="40" /><br />
+ − 219
Protecion level to be applied: <b><?php
+ − 220
switch($_REQUEST['level'])
+ − 221
{
+ − 222
case '0':
+ − 223
echo 'No protection';
+ − 224
break;
+ − 225
case '1':
+ − 226
echo 'Full protection';
+ − 227
break;
+ − 228
case '2':
+ − 229
echo 'Semi-protection';
+ − 230
break;
+ − 231
default:
+ − 232
echo 'None;</b> Warning: request validation will fail after clicking submit<b>';
+ − 233
}
+ − 234
?></b></p>
42
45ebe475ff75
I dunno how many times I'm gonna have to fix the "problem seems to be the hex conversion" bug, but this is at least the fourth try.
Dan
diff
changeset
+ − 235
<p><input type="submit" value="Protect page" style="font-weight: bold;" /></p>
0
+ − 236
</form>
+ − 237
<?php
+ − 238
$template->footer();
+ − 239
break;
+ − 240
case 'rename':
+ − 241
if(!empty($_POST['newname']))
+ − 242
{
+ − 243
$r = PageUtils::rename($paths->cpage['urlname_nons'], $paths->namespace, $_POST['newname']);
+ − 244
die_friendly('Page renamed', '<p>'.nl2br($r).' <a href="'.makeUrl($paths->page).'">Return to the page</a>.</p>');
+ − 245
}
+ − 246
$template->header();
+ − 247
?>
+ − 248
<form action="<?php echo makeUrl($paths->page, 'do=rename'); ?>" method="post">
+ − 249
<?php if(isset($_POST['newname'])) echo '<p style="color: red;">Error: you must enter a new name for this page.</p>'; ?>
+ − 250
<p>Please enter a new name for this page:</p>
+ − 251
<p><input type="text" name="newname" size="40" /></p>
42
45ebe475ff75
I dunno how many times I'm gonna have to fix the "problem seems to be the hex conversion" bug, but this is at least the fourth try.
Dan
diff
changeset
+ − 252
<p><input type="submit" value="Rename page" style="font-weight: bold;" /></p>
0
+ − 253
</form>
+ − 254
<?php
42
45ebe475ff75
I dunno how many times I'm gonna have to fix the "problem seems to be the hex conversion" bug, but this is at least the fourth try.
Dan
diff
changeset
+ − 255
$template->footer();
0
+ − 256
break;
+ − 257
case 'flushlogs':
+ − 258
if(!$session->get_permissions('clear_logs')) die_friendly('Access denied', '<p>Flushing the logs for a page <u>requires</u> administrative rights.</p>');
+ − 259
if(isset($_POST['_downthejohn']))
+ − 260
{
+ − 261
$template->header();
+ − 262
$result = PageUtils::flushlogs($paths->cpage['urlname_nons'], $paths->namespace);
+ − 263
echo '<p>'.$result.' <a href="'.makeUrl($paths->page).'">Return to the page</a>.</p>';
+ − 264
$template->footer();
+ − 265
break;
+ − 266
}
+ − 267
$template->header();
+ − 268
?>
+ − 269
<form action="<?php echo makeUrl($paths->page, 'do=flushlogs'); ?>" method="post">
+ − 270
<h3>You are about to <span style="color: red;">destroy</span> all logged edits and actions on this page.</h3>
116
77c75179bb95
Made most special pages "visible"; fixup for non-existent special page redirect in paths.php; rewrote Special:AllPages to have pagination (WiP, Special:SpecialPages is possibly next, depending on whether paginate_array works or not)
Dan
diff
changeset
+ − 271
<p>Unlike deleting or editing this page, this action is <u>not reversible</u>! You should only do this if you are desparate for
0
+ − 272
database space.</p>
+ − 273
<p>Do you really want to continue?</p>
+ − 274
<p><input type="submit" name="_downthejohn" value="Flush logs" style="color: red; font-weight: bold;" /></p>
+ − 275
</form>
+ − 276
<?php
+ − 277
$template->footer();
+ − 278
break;
+ − 279
case 'delvote':
+ − 280
if(isset($_POST['_ballotbox']))
+ − 281
{
+ − 282
$template->header();
+ − 283
$result = PageUtils::delvote($paths->cpage['urlname_nons'], $paths->namespace);
+ − 284
echo '<p>'.$result.' <a href="'.makeUrl($paths->page).'">Return to the page</a>.</p>';
+ − 285
$template->footer();
+ − 286
break;
+ − 287
}
+ − 288
$template->header();
+ − 289
?>
+ − 290
<form action="<?php echo makeUrl($paths->page, 'do=delvote'); ?>" method="post">
+ − 291
<h3>Your vote counts.</h3>
+ − 292
<p>If you think that this page is not relavent to the content on this site, or if it looks like this page was only created in
+ − 293
an attempt to spam the site, you can request that this page be deleted by an administrator.</p>
+ − 294
<p>After you vote, you should leave a comment explaining the reason for your vote, especially if you are the first person to
+ − 295
vote against this page.</p>
+ − 296
<p>So far, <?php echo ( $paths->cpage['delvotes'] == 1 ) ? $paths->cpage['delvotes'] . ' person has' : $paths->cpage['delvotes'] . ' people have'; ?> voted to delete this page.</p>
+ − 297
<p><input type="submit" name="_ballotbox" value="Vote to delete this page" /></p>
+ − 298
</form>
+ − 299
<?php
+ − 300
$template->footer();
+ − 301
break;
+ − 302
case 'resetvotes':
+ − 303
if(!$session->get_permissions('vote_reset')) die_friendly('Access denied', '<p>Resetting the deletion votes against this page <u>requires</u> admin rights.</p>');
+ − 304
if(isset($_POST['_youmaylivealittlelonger']))
+ − 305
{
+ − 306
$template->header();
+ − 307
$result = PageUtils::resetdelvotes($paths->cpage['urlname_nons'], $paths->namespace);
+ − 308
echo '<p>'.$result.' <a href="'.makeUrl($paths->page).'">Return to the page</a>.</p>';
+ − 309
$template->footer();
+ − 310
break;
+ − 311
}
+ − 312
$template->header();
+ − 313
?>
+ − 314
<form action="<?php echo makeUrl($paths->page, 'do=resetvotes'); ?>" method="post">
+ − 315
<p>This action will reset the number of votes against this page to zero. Are you sure you want to do this?</p>
+ − 316
<p><input type="submit" name="_youmaylivealittlelonger" value="Reset votes" /></p>
+ − 317
</form>
+ − 318
<?php
+ − 319
$template->footer();
+ − 320
break;
+ − 321
case 'deletepage':
+ − 322
if(!$session->get_permissions('delete_page')) die_friendly('Access denied', '<p>Deleting pages <u>requires</u> admin rights.</p>');
+ − 323
if(isset($_POST['_adiossucker']))
+ − 324
{
28
+ − 325
$reason = ( isset($_POST['reason']) ) ? $_POST['reason'] : false;
+ − 326
if ( empty($reason) )
+ − 327
$error = 'Please enter a reason for deleting this page.';
+ − 328
else
+ − 329
{
+ − 330
$template->header();
+ − 331
$result = PageUtils::deletepage($paths->cpage['urlname_nons'], $paths->namespace, $reason);
+ − 332
echo '<p>'.$result.' <a href="'.makeUrl($paths->page).'">Return to the page</a>.</p>';
+ − 333
$template->footer();
+ − 334
break;
+ − 335
}
0
+ − 336
}
+ − 337
$template->header();
+ − 338
?>
+ − 339
<form action="<?php echo makeUrl($paths->page, 'do=deletepage'); ?>" method="post">
+ − 340
<h3>You are about to <span style="color: red;">destroy</span> this page.</h3>
+ − 341
<p>While the deletion of the page itself is completely reversible, it is impossible to recover any comments or category information on this page. If this is a file page, the file along with all older revisions of it will be permanently deleted. Also, any custom information that this page is tagged with, such as a custom name, protection status, or additional settings such as whether to allow comments, will be permanently lost.</p>
+ − 342
<p>Are you <u>absolutely sure</u> that you want to continue?<br />
+ − 343
You will not be asked again.</p>
28
+ − 344
<?php if ( isset($error) ) echo "<p>$error</p>"; ?>
+ − 345
<p>Reason for deleting: <input type="text" name="reason" size="50" /></p>
0
+ − 346
<p><input type="submit" name="_adiossucker" value="Delete this page" style="color: red; font-weight: bold;" /></p>
+ − 347
</form>
+ − 348
<?php
+ − 349
$template->footer();
+ − 350
break;
+ − 351
case 'setwikimode':
+ − 352
if(!$session->get_permissions('set_wiki_mode')) die_friendly('Access denied', '<p>Changing the wiki mode setting <u>requires</u> admin rights.</p>');
97
+ − 353
if ( isset($_POST['finish']) )
+ − 354
{
+ − 355
$level = intval($_POST['level']);
+ − 356
if ( !in_array($level, array(0, 1, 2) ) )
+ − 357
{
+ − 358
die_friendly('Invalid request', '<p>Level not specified</p>');
+ − 359
}
+ − 360
$q = $db->sql_query('UPDATE '.table_prefix.'pages SET wiki_mode=' . $level . ' WHERE urlname=\'' . $db->escape($paths->cpage['urlname_nons']) . '\' AND namespace=\'' . $paths->namespace . '\';');
+ − 361
if ( !$q )
+ − 362
$db->_die();
+ − 363
redirect(makeUrl($paths->page), htmlspecialchars($paths->cpage['name']), 'Wiki mode for this page has been set. Redirecting you to the page...', 2);
+ − 364
}
+ − 365
else
+ − 366
{
+ − 367
$template->header();
+ − 368
if(!isset($_GET['level']) || ( isset($_GET['level']) && !preg_match('#^([0-9])$#', $_GET['level']))) die_friendly('Invalid request', '<p>Level not specified</p>');
+ − 369
$level = intval($_GET['level']);
+ − 370
if ( !in_array($level, array(0, 1, 2) ) )
+ − 371
{
+ − 372
die_friendly('Invalid request', '<p>Level not specified</p>');
+ − 373
}
+ − 374
echo '<form action="' . makeUrl($paths->page, 'do=setwikimode', true) . '" method="post">';
+ − 375
echo '<input type="hidden" name="finish" value="foo" />';
+ − 376
echo '<input type="hidden" name="level" value="' . $level . '" />';
+ − 377
$level_txt = ( $level == 0 ) ? 'disabled' : ( ( $level == 1 ) ? 'enabled' : 'use the global setting' );
+ − 378
$blurb = ( $level == 0 || ( $level == 2 && getConfig('wiki_mode') != '1' ) ) ? 'Because this will disable the wiki behavior on this page, several features, most
+ − 379
notably the ability for users to vote to have this page deleted, will be disabled as they are not relevant to non-wiki pages. In addition, users will not be able
+ − 380
to edit this page unless an ACL rule specifically permits them.' : 'Because this will enable the wiki behavior on this page, users will gain the ability to
+ − 381
freely edit this page unless an ACL rule specifically denies them. If your site is public and gets good traffic, you should be aware of the possiblity of vandalism, and you need to be ready to revert
+ − 382
malicious edits to this page.';
+ − 383
?>
+ − 384
<h3>You are changing wiki mode for this page.</h3>
+ − 385
<p>Wiki features will be set to <?php echo $level_txt; ?>. <?php echo $blurb; ?></p>
+ − 386
<p>If you want to continue, please click the button below.</p>
+ − 387
<p><input type="submit" value="Set wiki mode" /></p>
+ − 388
<?php
+ − 389
echo '</form>';
+ − 390
$template->footer();
+ − 391
}
0
+ − 392
break;
+ − 393
case 'diff':
+ − 394
$template->header();
+ − 395
$id1 = ( isset($_GET['diff1']) ) ? (int)$_GET['diff1'] : false;
+ − 396
$id2 = ( isset($_GET['diff2']) ) ? (int)$_GET['diff2'] : false;
+ − 397
if(!$id1 || !$id2) { echo '<p>Invalid request.</p>'; $template->footer(); break; }
+ − 398
if(!preg_match('#^([0-9]+)$#', (string)$_GET['diff1']) ||
+ − 399
!preg_match('#^([0-9]+)$#', (string)$_GET['diff2'] )) { echo '<p>SQL injection attempt</p>'; $template->footer(); break; }
+ − 400
echo PageUtils::pagediff($paths->cpage['urlname_nons'], $paths->namespace, $id1, $id2);
+ − 401
$template->footer();
+ − 402
break;
91
+ − 403
case 'detag':
+ − 404
if ( $session->user_level < USER_LEVEL_ADMIN )
+ − 405
{
+ − 406
die_friendly('Access denied', '<p>You need to be an administrator to detag pages.</p>');
+ − 407
}
+ − 408
if ( $paths->page_exists )
+ − 409
{
+ − 410
die_friendly('Invalid request', '<p>The detag action is only valid for pages that have been deleted in the past.</p>');
+ − 411
}
+ − 412
$q = $db->sql_query('DELETE FROM '.table_prefix.'tags WHERE page_id=\'' . $db->escape($paths->cpage['urlname_nons']) . '\' AND namespace=\'' . $paths->namespace . '\';');
+ − 413
if ( !$q )
+ − 414
$db->_die('Detag query, index.php:'.__LINE__);
+ − 415
die_friendly('Page detagged', '<p>All stale tags have been removed from this page.</p>');
+ − 416
break;
0
+ − 417
case 'aclmanager':
+ − 418
$data = ( isset($_POST['data']) ) ? $_POST['data'] : Array('mode' => 'listgroups');
+ − 419
PageUtils::aclmanager($data);
+ − 420
break;
+ − 421
}
42
45ebe475ff75
I dunno how many times I'm gonna have to fix the "problem seems to be the hex conversion" bug, but this is at least the fourth try.
Dan
diff
changeset
+ − 422
0
+ − 423
//
+ − 424
// Optimize HTML by replacing newlines with spaces (excludes <pre>, <script>, and <style> blocks)
+ − 425
//
+ − 426
if ($aggressive_optimize_html)
+ − 427
{
+ − 428
// Load up the HTML
+ − 429
$html = ob_get_contents();
+ − 430
ob_end_clean();
42
45ebe475ff75
I dunno how many times I'm gonna have to fix the "problem seems to be the hex conversion" bug, but this is at least the fourth try.
Dan
diff
changeset
+ − 431
80
cb7dde69c301
Improved and enabled HTML optimization algorithm; enabled gzip compression; added but did not test at all the tag cloud class in includes/tagcloud.php, this is still very preliminary and not ready for any type of production use
Dan
diff
changeset
+ − 432
$html = aggressive_optimize_html($html);
42
45ebe475ff75
I dunno how many times I'm gonna have to fix the "problem seems to be the hex conversion" bug, but this is at least the fourth try.
Dan
diff
changeset
+ − 433
0
+ − 434
// Re-enable output buffering to allow the Gzip function (below) to work
+ − 435
ob_start();
42
45ebe475ff75
I dunno how many times I'm gonna have to fix the "problem seems to be the hex conversion" bug, but this is at least the fourth try.
Dan
diff
changeset
+ − 436
0
+ − 437
// Done, send it to the user
+ − 438
echo( $html );
+ − 439
}
80
cb7dde69c301
Improved and enabled HTML optimization algorithm; enabled gzip compression; added but did not test at all the tag cloud class in includes/tagcloud.php, this is still very preliminary and not ready for any type of production use
Dan
diff
changeset
+ − 440
cb7dde69c301
Improved and enabled HTML optimization algorithm; enabled gzip compression; added but did not test at all the tag cloud class in includes/tagcloud.php, this is still very preliminary and not ready for any type of production use
Dan
diff
changeset
+ − 441
$db->close();
cb7dde69c301
Improved and enabled HTML optimization algorithm; enabled gzip compression; added but did not test at all the tag cloud class in includes/tagcloud.php, this is still very preliminary and not ready for any type of production use
Dan
diff
changeset
+ − 442
gzip_output();
42
45ebe475ff75
I dunno how many times I'm gonna have to fix the "problem seems to be the hex conversion" bug, but this is at least the fourth try.
Dan
diff
changeset
+ − 443
0
+ − 444
?>