Categories: ';
echo '(Uncategorized)';
if( ( $paths->wiki_mode && !$paths->page_protected ) || ( $session->get_permissions('edit_cat') && $session->get_permissions('even_when_protected') ) ) echo ' [ edit categorization ]
';
@@ -559,6 +613,180 @@
}
$db->free_result();
}
+*/
+
+function show_category_info()
+{
+ global $db, $session, $paths, $template, $plugins; // Common objects
+
+ if ( $paths->namespace == 'Category' )
+ {
+ // Show member pages and subcategories
+ $q = $db->sql_query('SELECT p.urlname, p.namespace, p.name, p.namespace=\'Category\' AS is_category FROM '.table_prefix.'categories AS c
+ LEFT JOIN '.table_prefix.'pages AS p
+ ON ( p.urlname = c.page_id AND p.namespace = c.namespace )
+ WHERE c.category_id=\'' . $db->escape($paths->cpage['urlname_nons']) . '\'
+ ORDER BY is_category DESC, p.name ASC;');
+ if ( !$q )
+ {
+ $db->_die();
+ }
+ echo 'Subcategories
'; + echo '';
+ echo '';
+ echo '
' . "\n\n";
+ echo '| '; + } + } + else + { + echo ' | No subcategories. | '; + } + echo '
Pages
'; + echo '';
+ echo '';
+ echo '
' . "\n\n";
+ echo '| "; // " to workaround stupid jEdit bug + + $link = makeUrlNS($row['namespace'], sanitize_page_id($row['urlname'])); + echo 'nslist[$row['namespace']] . sanitize_page_id($row['urlname']); + if ( !isPage( $key ) ) + { + echo ' class="wikilink-nonexistent"'; + } + echo '>'; + $title = get_page_title_ns($row['urlname'], $row['namespace']); + echo htmlspecialchars($title); + echo ''; + + echo " | "; + } + if ( !$switched ) + { + if ( $counter > 0 ) + { + // Fill-in + while ( $ticker < 3 ) + { + $ticker++; + echo ''; + } + } + else + { + echo ' | No subcategories. | '; + } + echo '
Pages
'; + echo '';
+ echo '';
+ echo '
' . "\n\n";
+ }
+
+ if ( $paths->namespace != 'Special' && $paths->namespace != 'Admin' )
+ {
+ echo '| '; + } + } + else + { + echo ' | No pages in this category. | '; + } + echo '
';
+ if ( $session->user_level >= USER_LEVEL_ADMIN )
+ {
+ echo '
';
+
+ }
+
+}
+
+/**
+ * Prints out the file information box seen on File: pages. Doesn't take or return anything, but assumes that the page information is already set in $paths, and expects $paths->namespace to be File.
+ */
function show_file_info()
{
@@ -630,6 +858,10 @@
echo '';
+ echo '(show page tags)';
+ echo '
';
+ }
+ echo 'Categories: ';
+
+ $where = '( c.page_id=\'' . $db->escape($paths->cpage['urlname_nons']) . '\' AND c.namespace=\'' . $db->escape($paths->namespace) . '\' )';
+ $prefix = table_prefix;
+ $sql = <<sql_query($sql);
+ if ( !$q )
+ $db->_die();
+
+ if ( $row = $db->fetchrow() )
+ {
+ $list = array();
+ do
+ {
+ $cid = sanitize_page_id($row['category_id']);
+ $title = get_page_title_ns($cid, 'Category');
+ $link = makeUrlNS('Category', $cid);
+ $list[] = '' . htmlspecialchars($title) . '';
+ }
+ while ( $row = $db->fetchrow() );
+ echo implode(', ', $list);
+ }
+ else
+ {
+ echo '(Uncategorized)';
+ }
+
+ $can_edit = ( $session->get_permissions('edit_cat') && ( !$paths->page_protected || $session->get_permissions('even_when_protected') ) );
+ if ( $can_edit )
+ {
+ $edit_link = 'edit categorization';
+ echo ' [ ' . $edit_link . ' ]';
+ }
+
+ echo '
'; } +/** + * Shows header information on the current page. Currently this is only the delete-vote feature. Doesn't take or return anything, but assumes that the page information is already set in $paths. + */ + function display_page_headers() { global $db, $session, $paths, $template, $plugins; // Common objects @@ -653,6 +885,10 @@ } } +/** + * Displays page footer information including file and category info. This also has the send_page_footers hook. Doesn't take or return anything, but assumes that the page information is already set in $paths. + */ + function display_page_footers() { global $db, $session, $paths, $template, $plugins; // Common objects @@ -666,6 +902,10 @@ show_category_info(); } +/** + * Deprecated, do not use. + */ + function password_prompt($id = false) { global $db, $session, $paths, $template, $plugins; // Common objects @@ -679,6 +919,12 @@ } } +/** + * Some sort of primitive hex converter from back in the day. Deprecated, do not use. + * @param string Text to encode + * @return string + */ + function str_hex($string){ $hex=''; for ($i=0; $i < strlen($string); $i++){ @@ -687,92 +933,111 @@ return substr($hex, 1, strlen($hex)); } -// Function pulled from phpBB's smtp.php -function smtp_get_response($socket, $response, $line = __LINE__) +/** + * Essentially an return code reader for a socket. Don't use this unless you're writing mail code and smtp_send_email doesn't cut it. Ported from phpBB's smtp.php. + * @param socket A socket resource + * @param string The expected response from the server, this needs to be exactly three characters. + */ + +function smtp_get_response($socket, $response, $line = __LINE__) { - $server_response = ''; - while (substr($server_response, 3, 1) != ' ') - { - if (!($server_response = fgets($socket, 256))) - { + $server_response = ''; + while (substr($server_response, 3, 1) != ' ') + { + if (!($server_response = fgets($socket, 256))) + { die_friendly('SMTP Error', "
Couldn't get mail server response codes
"); - } - } + } + } - if (!(substr($server_response, 0, 3) == $response)) - { + if (!(substr($server_response, 0, 3) == $response)) + { die_friendly('SMTP Error', "Ran into problems sending mail. Response: $server_response
"); - } + } } +/** + * Wrapper for smtp_send_email_core that takes the sender as the fourth parameter instead of additional headers. + * @param string E-mail address to send to + * @param string Subject line + * @param string The body of the message + * @param string Address of the sender + */ + function smtp_send_email($to, $subject, $message, $from) { return smtp_send_email_core($to, $subject, $message, "From: <$from>\n"); } -// Replacement or substitute for PHP's mail command -// Ported from phpBB - copyright (C) phpBB group, GPL. +/** + * Replacement or substitute for PHP's mail() builtin function. + * @param string E-mail address to send to + * @param string Subject line + * @param string The body of the message + * @param string Message headers, separated by a single newline ("\n") + * @copyright (C) phpBB Group + * @license GPL + */ + function smtp_send_email_core($mail_to, $subject, $message, $headers = '') { - global $board_config; - - // Fix any bare linefeeds in the message to make it RFC821 Compliant. - $message = preg_replace("#(? 1) - { - $headers = join("\n", $headers); - } - else - { - $headers = $headers[0]; - } - } - $headers = chop($headers); + if ($headers != '') + { + if (is_array($headers)) + { + if (sizeof($headers) > 1) + { + $headers = join("\n", $headers); + } + else + { + $headers = $headers[0]; + } + } + $headers = chop($headers); - // Make sure there are no bare linefeeds in the headers - $headers = preg_replace('#(?\r\n"); - smtp_get_response($socket, "250", __LINE__); + // From this point onward most server response codes should be 250 + // Specify who the mail is from.... + enano_fputs($socket, "MAIL FROM: <" . getConfig('contact_email') . ">\r\n"); + smtp_get_response($socket, "250", __LINE__); - // Specify each user to send to and build to header. - $to_header = ''; + // Specify each user to send to and build to header. + $to_header = ''; - // Add an additional bit of error checking to the To field. - $mail_to = (trim($mail_to) == '') ? 'Undisclosed-recipients:;' : trim($mail_to); - if (preg_match('#[^ ]+\@[^ ]+#', $mail_to)) - { - enano_fputs($socket, "RCPT TO: <$mail_to>\r\n"); - smtp_get_response($socket, "250", __LINE__); - } + // Add an additional bit of error checking to the To field. + $mail_to = (trim($mail_to) == '') ? 'Undisclosed-recipients:;' : trim($mail_to); + if (preg_match('#[^ ]+\@[^ ]+#', $mail_to)) + { + enano_fputs($socket, "RCPT TO: <$mail_to>\r\n"); + smtp_get_response($socket, "250", __LINE__); + } - // Ok now do the CC and BCC fields... - @reset($bcc); - while(list(, $bcc_address) = each($bcc)) - { - // Add an additional bit of error checking to bcc header... - $bcc_address = trim($bcc_address); - if (preg_match('#[^ ]+\@[^ ]+#', $bcc_address)) - { - enano_fputs($socket, "RCPT TO: <$bcc_address>\r\n"); - smtp_get_response($socket, "250", __LINE__); - } - } + // Ok now do the CC and BCC fields... + @reset($bcc); + while(list(, $bcc_address) = each($bcc)) + { + // Add an additional bit of error checking to bcc header... + $bcc_address = trim($bcc_address); + if (preg_match('#[^ ]+\@[^ ]+#', $bcc_address)) + { + enano_fputs($socket, "RCPT TO: <$bcc_address>\r\n"); + smtp_get_response($socket, "250", __LINE__); + } + } - @reset($cc); - while(list(, $cc_address) = each($cc)) - { - // Add an additional bit of error checking to cc header - $cc_address = trim($cc_address); - if (preg_match('#[^ ]+\@[^ ]+#', $cc_address)) - { - enano_fputs($socket, "RCPT TO: <$cc_address>\r\n"); - smtp_get_response($socket, "250", __LINE__); - } - } + @reset($cc); + while(list(, $cc_address) = each($cc)) + { + // Add an additional bit of error checking to cc header + $cc_address = trim($cc_address); + if (preg_match('#[^ ]+\@[^ ]+#', $cc_address)) + { + enano_fputs($socket, "RCPT TO: <$cc_address>\r\n"); + smtp_get_response($socket, "250", __LINE__); + } + } - // Ok now we tell the server we are ready to start sending data - enano_fputs($socket, "DATA\r\n"); + // Ok now we tell the server we are ready to start sending data + enano_fputs($socket, "DATA\r\n"); - // This is the last response code we look for until the end of the message. - smtp_get_response($socket, "354", __LINE__); + // This is the last response code we look for until the end of the message. + smtp_get_response($socket, "354", __LINE__); - // Send the Subject Line... - enano_fputs($socket, "Subject: $subject\r\n"); + // Send the Subject Line... + enano_fputs($socket, "Subject: $subject\r\n"); - // Now the To Header. - enano_fputs($socket, "To: $mail_to\r\n"); + // Now the To Header. + enano_fputs($socket, "To: $mail_to\r\n"); - // Now any custom headers.... - enano_fputs($socket, "$headers\r\n\r\n"); + // Now any custom headers.... + enano_fputs($socket, "$headers\r\n\r\n"); - // Ok now we are ready for the message... - enano_fputs($socket, "$message\r\n"); + // Ok now we are ready for the message... + enano_fputs($socket, "$message\r\n"); - // Ok the all the ingredients are mixed in let's cook this puppy... - enano_fputs($socket, ".\r\n"); - smtp_get_response($socket, "250", __LINE__); + // Ok the all the ingredients are mixed in let's cook this puppy... + enano_fputs($socket, ".\r\n"); + smtp_get_response($socket, "250", __LINE__); - // Now tell the server we are done and close the socket... - enano_fputs($socket, "QUIT\r\n"); - fclose($socket); + // Now tell the server we are done and close the socket... + enano_fputs($socket, "QUIT\r\n"); + fclose($socket); - return TRUE; + return TRUE; } /** @@ -918,85 +1183,41 @@ return $r; } +/** + * What kinda sh** was I thinking when I wrote this. Deprecated. + */ + function _dualurlenc($t) { return rawurlencode(rawurlencode($t)); } - + +/** + * Badly named function to send back eval'able Javascript code with an error message. Deprecated, use JSON instead. + * @param string Message to send + */ + function _die($t) { $_ob = 'document.getElementById("ajaxEditContainer").innerHTML = unescape(\'' . rawurlencode('' . $t . '') . '\')'; die($_ob); } +/** + * Same as _die(), but sends an SQL backtrace with the error message, and doesn't halt execution. + * @param string Message to send + */ + function jsdie($text) { global $db, $session, $paths, $template, $plugins; // Common objects $text = rawurlencode($text . "\n\nSQL Backtrace:\n" . $db->sql_backtrace()); echo 'document.getElementById("ajaxEditContainer").innerHTML = unescape(\''.$text.'\');'; } -// HTML sanitizing function - written by Kallahar -// Original function at: http://quickwired.com/kallahar/smallprojects/php_xss_filter_function.php - -// UNUSED - todo: remove this in gold or put it to use - -function RemoveXSS($val) { - // remove all non-printable characters. CR(0a) and LF(0b) and TAB(9) are allowed - // this prevents some character re-spacing such as'; - + if ( !in_array($tag_name, $tag_whitelist) ) { // Illegal tag //echo $tag_name . ' '; - + $s = ( empty($attribs_only) ) ? '' : ' '; - + $sanitized = '<' . $tag_name . $s . $attribs_only . '>'; - + $html = substr($html, 0, $tag_start) . $sanitized . substr($html, $i + 1); $html = str_replace('', '</' . $tag_name . '>', $html); $new_i = $tag_start + strlen($sanitized); - + $len = strlen($html); $i = $new_i; - + $in_tag = false; $tag_name = ''; continue; @@ -1606,14 +1827,14 @@ continue; $f = fixTagAttributes( $attribs_only, $tag_name ); $s = ( empty($f) ) ? '' : ' '; - + $sanitized = '<' . $tag_name . $f . '>'; $new_i = $tag_start + strlen($sanitized); - + $html = substr($html, 0, $tag_start) . $sanitized . substr($html, $i + 1); $len = strlen($html); $i = $new_i; - + $in_tag = false; $tag_name = ''; continue; @@ -1629,20 +1850,20 @@ $trk_name = false; } } - + } - + // Vulnerability from ha.ckers.org/xss.html: //