0
+ − 1
<?php
73
0a74676a2f2f
Made the move to Loch Ness, and got some basic page grouping functionality working. TODO: fix some UI issues in Javascript ACL editor and change non-JS ACL editor to work with page groups too
Dan
diff
changeset
+ − 2
202
+ − 3
/**
0
+ − 4
* Enano - an open-source CMS capable of wiki functions, Drupal-like sidebar blocks, and everything in between
167
+ − 5
* Version 1.0.2 (Coblynau)
0
+ − 6
* Copyright (C) 2006-2007 Dan Fuhry
+ − 7
*
+ − 8
* This program is Free Software; you can redistribute and/or modify it under the terms of the GNU General Public License
+ − 9
* as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.
+ − 10
*
+ − 11
* This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied
+ − 12
* warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for details.
+ − 13
*
202
+ − 14
* @package Enano
+ − 15
* @subpackage Frontend
+ − 16
*
0
+ − 17
*/
202
+ − 18
81
d7fc25acd3f3
Replaced the menu in the admin theme with something much more visually pleasureable; minor fix in Special:UploadFile; finished patching a couple of XSS problems from Banshee; finished Admin:PageGroups; removed unneeded code in flyin.js; finished tag system (except tag cloud); 1.0.1 release candidate
Dan
diff
changeset
+ − 19
// Set up gzip encoding before any output is sent
42
45ebe475ff75
I dunno how many times I'm gonna have to fix the "problem seems to be the hex conversion" bug, but this is at least the fourth try.
Dan
diff
changeset
+ − 20
173
91127e62f38f
Fixed some regular expressions in HTML optimization algorithm; regex page groups can be edited now (oops)
Dan
diff
changeset
+ − 21
$aggressive_optimize_html = true;
42
45ebe475ff75
I dunno how many times I'm gonna have to fix the "problem seems to be the hex conversion" bug, but this is at least the fourth try.
Dan
diff
changeset
+ − 22
0
+ − 23
global $do_gzip;
80
cb7dde69c301
Improved and enabled HTML optimization algorithm; enabled gzip compression; added but did not test at all the tag cloud class in includes/tagcloud.php, this is still very preliminary and not ready for any type of production use
Dan
diff
changeset
+ − 24
$do_gzip = true;
42
45ebe475ff75
I dunno how many times I'm gonna have to fix the "problem seems to be the hex conversion" bug, but this is at least the fourth try.
Dan
diff
changeset
+ − 25
0
+ − 26
if(isset($_SERVER['PATH_INFO'])) $v = $_SERVER['PATH_INFO'];
+ − 27
elseif(isset($_GET['title'])) $v = $_GET['title'];
+ − 28
else $v = '';
42
45ebe475ff75
I dunno how many times I'm gonna have to fix the "problem seems to be the hex conversion" bug, but this is at least the fourth try.
Dan
diff
changeset
+ − 29
80
cb7dde69c301
Improved and enabled HTML optimization algorithm; enabled gzip compression; added but did not test at all the tag cloud class in includes/tagcloud.php, this is still very preliminary and not ready for any type of production use
Dan
diff
changeset
+ − 30
if ( isset($_GET['nocompress']) )
cb7dde69c301
Improved and enabled HTML optimization algorithm; enabled gzip compression; added but did not test at all the tag cloud class in includes/tagcloud.php, this is still very preliminary and not ready for any type of production use
Dan
diff
changeset
+ − 31
$aggressive_optimize_html = false;
cb7dde69c301
Improved and enabled HTML optimization algorithm; enabled gzip compression; added but did not test at all the tag cloud class in includes/tagcloud.php, this is still very preliminary and not ready for any type of production use
Dan
diff
changeset
+ − 32
0
+ − 33
error_reporting(E_ALL);
42
45ebe475ff75
I dunno how many times I'm gonna have to fix the "problem seems to be the hex conversion" bug, but this is at least the fourth try.
Dan
diff
changeset
+ − 34
0
+ − 35
// if(!strstr($v, 'CSS') && !strstr($v, 'UploadFile') && !strstr($v, 'DownloadFile')) // These pages are blacklisted because we can't have debugConsole's HTML output disrupting the flow of header() calls and whatnot
+ − 36
// {
+ − 37
// $do_gzip = ( function_exists('gzcompress') && ( isset($_SERVER['HTTP_ACCEPT_ENCODING']) && strstr($_SERVER['HTTP_ACCEPT_ENCODING'], 'gzip') ) ) ? true : false;
+ − 38
// // Uncomment the following line to enable debugConsole (requires PHP 5 or later)
+ − 39
// // define('ENANO_DEBUG', '');
+ − 40
// }
42
45ebe475ff75
I dunno how many times I'm gonna have to fix the "problem seems to be the hex conversion" bug, but this is at least the fourth try.
Dan
diff
changeset
+ − 41
0
+ − 42
if(defined('ENANO_DEBUG')) $do_gzip = false;
42
45ebe475ff75
I dunno how many times I'm gonna have to fix the "problem seems to be the hex conversion" bug, but this is at least the fourth try.
Dan
diff
changeset
+ − 43
0
+ − 44
if($aggressive_optimize_html || $do_gzip)
+ − 45
{
+ − 46
ob_start();
+ − 47
}
42
45ebe475ff75
I dunno how many times I'm gonna have to fix the "problem seems to be the hex conversion" bug, but this is at least the fourth try.
Dan
diff
changeset
+ − 48
0
+ − 49
require('includes/common.php');
42
45ebe475ff75
I dunno how many times I'm gonna have to fix the "problem seems to be the hex conversion" bug, but this is at least the fourth try.
Dan
diff
changeset
+ − 50
0
+ − 51
global $db, $session, $paths, $template, $plugins; // Common objects
42
45ebe475ff75
I dunno how many times I'm gonna have to fix the "problem seems to be the hex conversion" bug, but this is at least the fourth try.
Dan
diff
changeset
+ − 52
0
+ − 53
if(!isset($_GET['do'])) $_GET['do'] = 'view';
+ − 54
switch($_GET['do'])
+ − 55
{
+ − 56
default:
+ − 57
die_friendly('Invalid action', '<p>The action "'.$_GET['do'].'" is not defined. Return to <a href="'.makeUrl($paths->page).'">viewing this page\'s text</a>.</p>');
+ − 58
break;
+ − 59
case 'view':
+ − 60
// echo PageUtils::getpage($paths->page, true, ( (isset($_GET['oldid'])) ? $_GET['oldid'] : false ));
21
663fcf528726
Updated all version numbers back to Banshee; a few preliminary steps towards full UTF-8 support in page URLs
Dan
diff
changeset
+ − 61
$rev_id = ( (isset($_GET['oldid'])) ? intval($_GET['oldid']) : 0 );
663fcf528726
Updated all version numbers back to Banshee; a few preliminary steps towards full UTF-8 support in page URLs
Dan
diff
changeset
+ − 62
$page = new PageProcessor( $paths->cpage['urlname_nons'], $paths->namespace, $rev_id );
0
+ − 63
$page->send_headers = true;
32
4d87aad3c4c0
Finished everything on the TODO list (yay!); several CSS cleanups; tons more changes in this commit - see the patch for details
Dan
diff
changeset
+ − 64
$pagepass = ( isset($_REQUEST['pagepass']) ) ? sha1($_REQUEST['pagepass']) : '';
4d87aad3c4c0
Finished everything on the TODO list (yay!); several CSS cleanups; tons more changes in this commit - see the patch for details
Dan
diff
changeset
+ − 65
$page->password = $pagepass;
61
+ − 66
$page->send(true);
0
+ − 67
break;
+ − 68
case 'comments':
+ − 69
$template->header();
+ − 70
$sub = ( isset ($_GET['sub']) ) ? $_GET['sub'] : false;
+ − 71
switch($sub)
+ − 72
{
+ − 73
case 'admin':
+ − 74
default:
+ − 75
$act = ( isset ($_GET['action']) ) ? $_GET['action'] : false;
+ − 76
$id = ( isset ($_GET['id']) ) ? intval($_GET['id']) : -1;
+ − 77
echo PageUtils::comments_html($paths->cpage['urlname_nons'], $paths->namespace, $act, Array('id'=>$id));
+ − 78
break;
+ − 79
case 'postcomment':
+ − 80
if(empty($_POST['name']) ||
+ − 81
empty($_POST['subj']) ||
+ − 82
empty($_POST['text'])
+ − 83
) { echo 'Invalid request'; break; }
+ − 84
$cid = ( isset($_POST['captcha_id']) ) ? $_POST['captcha_id'] : false;
+ − 85
$cin = ( isset($_POST['captcha_input']) ) ? $_POST['captcha_input'] : false;
+ − 86
PageUtils::addcomment($paths->cpage['urlname_nons'], $paths->namespace, $_POST['name'], $_POST['subj'], $_POST['text'], $cin, $cid); // All filtering, etc. is handled inside this method
+ − 87
echo PageUtils::comments_html($paths->cpage['urlname_nons'], $paths->namespace);
+ − 88
break;
+ − 89
case 'editcomment':
+ − 90
if(!isset($_GET['id']) || ( isset($_GET['id']) && !preg_match('#^([0-9]+)$#', $_GET['id']) )) { echo '<p>Invalid comment ID</p>'; break; }
+ − 91
$q = $db->sql_query('SELECT subject,comment_data,comment_id FROM '.table_prefix.'comments WHERE comment_id='.$_GET['id']);
+ − 92
if(!$q) $db->_die('The comment data could not be selected.');
+ − 93
$row = $db->fetchrow();
+ − 94
$db->free_result();
+ − 95
echo '<form action="'.makeUrl($paths->page, 'do=comments&sub=savecomment').'" method="post">';
+ − 96
echo "<br /><div class='tblholder'><table border='0' width='100%' cellspacing='1' cellpadding='4'>
+ − 97
<tr><td class='row1'>Subject:</td><td class='row1'><input type='text' name='subj' value='{$row['subject']}' /></td></tr>
+ − 98
<tr><td class='row2'>Comment:</td><td class='row2'><textarea rows='10' cols='40' style='width: 98%;' name='text'>{$row['comment_data']}</textarea></td></tr>
+ − 99
<tr><td class='row1' colspan='2' class='row1' style='text-align: center;'><input type='hidden' name='id' value='{$row['comment_id']}' /><input type='submit' value='Save Changes' /></td></tr>
+ − 100
</table></div>";
+ − 101
echo '</form>';
+ − 102
break;
+ − 103
case 'savecomment':
+ − 104
if(empty($_POST['subj']) || empty($_POST['text'])) { echo '<p>Invalid request</p>'; break; }
+ − 105
$r = PageUtils::savecomment_neater($paths->cpage['urlname_nons'], $paths->namespace, $_POST['subj'], $_POST['text'], (int)$_POST['id']);
+ − 106
if($r != 'good') { echo "<pre>$r</pre>"; break; }
+ − 107
echo PageUtils::comments_html($paths->cpage['urlname_nons'], $paths->namespace);
+ − 108
break;
+ − 109
case 'deletecomment':
+ − 110
if(!empty($_GET['id']))
+ − 111
{
+ − 112
PageUtils::deletecomment_neater($paths->cpage['urlname_nons'], $paths->namespace, (int)$_GET['id']);
+ − 113
}
+ − 114
echo PageUtils::comments_html($paths->cpage['urlname_nons'], $paths->namespace);
+ − 115
break;
+ − 116
}
+ − 117
$template->footer();
+ − 118
break;
+ − 119
case 'edit':
+ − 120
if(isset($_POST['_cancel'])) { header('Location: '.makeUrl($paths->page)); echo '<html><head><title>Redirecting...</title></head><body>If you haven\'t been redirected yet, <a href="'.makeUrl($paths->page).'">click here</a>.'; break; }
+ − 121
if(isset($_POST['_save'])) {
+ − 122
$e = PageUtils::savepage($paths->cpage['urlname_nons'], $paths->namespace, $_POST['page_text'], $_POST['edit_summary'], isset($_POST['minor']));
+ − 123
header('Location: '.makeUrl($paths->page)); echo '<html><head><title>Redirecting...</title></head><body>If you haven\'t been redirected yet, <a href="'.makeUrl($paths->page).'">click here</a>.'; break;
+ − 124
}
+ − 125
$template->header();
+ − 126
if(isset($_POST['_preview']))
+ − 127
{
+ − 128
$text = $_POST['page_text'];
+ − 129
echo PageUtils::genPreview($_POST['page_text']);
+ − 130
}
+ − 131
else $text = RenderMan::getPage($paths->cpage['urlname_nons'], $paths->namespace, 0, false, false, false, false);
+ − 132
echo '
+ − 133
<form action="'.makeUrl($paths->page, 'do=edit').'" method="post" enctype="multipart/form-data">
+ − 134
<br />
+ − 135
<textarea name="page_text" rows="20" cols="60" style="width: 97%;">'.$text.'</textarea><br />
+ − 136
<br />
+ − 137
';
+ − 138
if($paths->wiki_mode)
42
45ebe475ff75
I dunno how many times I'm gonna have to fix the "problem seems to be the hex conversion" bug, but this is at least the fourth try.
Dan
diff
changeset
+ − 139
echo 'Edit summary: <input name="edit_summary" type="text" size="40" /><br /><label><input type="checkbox" name="minor" /> This is a minor edit</label><br />';
0
+ − 140
echo '<br />
+ − 141
<input type="submit" name="_save" value="Save changes" style="font-weight: bold;" />
+ − 142
<input type="submit" name="_preview" value="Preview changes" />
+ − 143
<input type="submit" name="_revert" value="Revert changes" />
+ − 144
<input type="submit" name="_cancel" value="Cancel" />
+ − 145
</form>
+ − 146
';
159
+ − 147
if ( getConfig('wiki_edit_notice') == '1' )
+ − 148
{
+ − 149
$notice = getConfig('wiki_edit_notice_text');
+ − 150
echo RenderMan::render($notice);
+ − 151
}
0
+ − 152
$template->footer();
+ − 153
break;
+ − 154
case 'viewsource':
+ − 155
$template->header();
+ − 156
$text = RenderMan::getPage($paths->cpage['urlname_nons'], $paths->namespace, 0, false, false, false, false);
+ − 157
echo '
+ − 158
<form action="'.makeUrl($paths->page, 'do=edit').'" method="post">
+ − 159
<br />
+ − 160
<textarea readonly="readonly" name="page_text" rows="20" cols="60" style="width: 97%;">'.$text.'</textarea>';
+ − 161
echo '<br />
+ − 162
<input type="submit" name="_cancel" value="Close viewer" />
+ − 163
</form>
+ − 164
';
+ − 165
$template->footer();
+ − 166
break;
+ − 167
case 'history':
+ − 168
$hist = PageUtils::histlist($paths->cpage['urlname_nons'], $paths->namespace);
+ − 169
$template->header();
+ − 170
echo $hist;
+ − 171
$template->footer();
+ − 172
break;
+ − 173
case 'rollback':
+ − 174
$id = (isset($_GET['id'])) ? $_GET['id'] : false;
+ − 175
if(!$id || !preg_match('#^([0-9]+)$#', $id)) die_friendly('Invalid action ID', '<p>The URL parameter "id" is not an integer. Exiting to prevent nasties like SQL injection, etc.</p>');
+ − 176
$rb = PageUtils::rollback( (int) $id );
+ − 177
$template->header();
+ − 178
echo '<p>'.$rb.' <a href="'.makeUrl($paths->page).'">Return to the page</a>.</p>';
+ − 179
$template->footer();
+ − 180
break;
+ − 181
case 'catedit':
+ − 182
if(isset($_POST['__enanoSaveButton']))
+ − 183
{
+ − 184
unset($_POST['__enanoSaveButton']);
+ − 185
$val = PageUtils::catsave($paths->cpage['urlname_nons'], $paths->namespace, $_POST);
+ − 186
if($val == 'GOOD')
+ − 187
{
+ − 188
header('Location: '.makeUrl($paths->page)); echo '<html><head><title>Redirecting...</title></head><body>If you haven\'t been redirected yet, <a href="'.makeUrl($paths->page).'">click here</a>.'; break;
+ − 189
} else {
+ − 190
die_friendly('Error saving category information', '<p>'.$val.'</p>');
+ − 191
}
+ − 192
}
+ − 193
elseif(isset($_POST['__enanoCatCancel']))
+ − 194
{
+ − 195
header('Location: '.makeUrl($paths->page)); echo '<html><head><title>Redirecting...</title></head><body>If you haven\'t been redirected yet, <a href="'.makeUrl($paths->page).'">click here</a>.'; break;
+ − 196
}
+ − 197
$template->header();
+ − 198
$c = PageUtils::catedit_raw($paths->cpage['urlname_nons'], $paths->namespace);
+ − 199
echo $c[1];
+ − 200
$template->footer();
+ − 201
break;
+ − 202
case 'moreoptions':
+ − 203
$template->header();
32
4d87aad3c4c0
Finished everything on the TODO list (yay!); several CSS cleanups; tons more changes in this commit - see the patch for details
Dan
diff
changeset
+ − 204
echo '<div class="menu_nojs" style="width: 150px; padding: 0;"><ul style="display: block;"><li><div class="label">More options for this page</div><div style="clear: both;"></div></li>'.$template->tpl_strings['TOOLBAR_EXTRAS'].'</ul></div>';
0
+ − 205
$template->footer();
+ − 206
break;
+ − 207
case 'protect':
+ − 208
if (!isset($_REQUEST['level'])) die_friendly('Invalid request', '<p>No protection level specified</p>');
+ − 209
if(!empty($_POST['reason']))
+ − 210
{
+ − 211
if(!preg_match('#^([0-2]*){1}$#', $_POST['level'])) die_friendly('Error protecting page', '<p>Request validation failed</p>');
+ − 212
PageUtils::protect($paths->cpage['urlname_nons'], $paths->namespace, intval($_POST['level']), $_POST['reason']);
+ − 213
die_friendly('Page protected', '<p>The protection setting has been applied. <a href="'.makeUrl($paths->page).'">Return to the page</a>.</p>');
+ − 214
}
+ − 215
$template->header();
+ − 216
?>
+ − 217
<form action="<?php echo makeUrl($paths->page, 'do=protect'); ?>" method="post">
+ − 218
<input type="hidden" name="level" value="<?php echo $_REQUEST['level']; ?>" />
+ − 219
<?php if(isset($_POST['reason'])) echo '<p style="color: red;">Error: you must enter a reason for protecting this page.</p>'; ?>
+ − 220
<p>Reason for protecting the page:</p>
+ − 221
<p><input type="text" name="reason" size="40" /><br />
+ − 222
Protecion level to be applied: <b><?php
+ − 223
switch($_REQUEST['level'])
+ − 224
{
+ − 225
case '0':
+ − 226
echo 'No protection';
+ − 227
break;
+ − 228
case '1':
+ − 229
echo 'Full protection';
+ − 230
break;
+ − 231
case '2':
+ − 232
echo 'Semi-protection';
+ − 233
break;
+ − 234
default:
+ − 235
echo 'None;</b> Warning: request validation will fail after clicking submit<b>';
+ − 236
}
+ − 237
?></b></p>
42
45ebe475ff75
I dunno how many times I'm gonna have to fix the "problem seems to be the hex conversion" bug, but this is at least the fourth try.
Dan
diff
changeset
+ − 238
<p><input type="submit" value="Protect page" style="font-weight: bold;" /></p>
0
+ − 239
</form>
+ − 240
<?php
+ − 241
$template->footer();
+ − 242
break;
+ − 243
case 'rename':
+ − 244
if(!empty($_POST['newname']))
+ − 245
{
+ − 246
$r = PageUtils::rename($paths->cpage['urlname_nons'], $paths->namespace, $_POST['newname']);
+ − 247
die_friendly('Page renamed', '<p>'.nl2br($r).' <a href="'.makeUrl($paths->page).'">Return to the page</a>.</p>');
+ − 248
}
+ − 249
$template->header();
+ − 250
?>
+ − 251
<form action="<?php echo makeUrl($paths->page, 'do=rename'); ?>" method="post">
+ − 252
<?php if(isset($_POST['newname'])) echo '<p style="color: red;">Error: you must enter a new name for this page.</p>'; ?>
+ − 253
<p>Please enter a new name for this page:</p>
+ − 254
<p><input type="text" name="newname" size="40" /></p>
42
45ebe475ff75
I dunno how many times I'm gonna have to fix the "problem seems to be the hex conversion" bug, but this is at least the fourth try.
Dan
diff
changeset
+ − 255
<p><input type="submit" value="Rename page" style="font-weight: bold;" /></p>
0
+ − 256
</form>
+ − 257
<?php
42
45ebe475ff75
I dunno how many times I'm gonna have to fix the "problem seems to be the hex conversion" bug, but this is at least the fourth try.
Dan
diff
changeset
+ − 258
$template->footer();
0
+ − 259
break;
+ − 260
case 'flushlogs':
+ − 261
if(!$session->get_permissions('clear_logs')) die_friendly('Access denied', '<p>Flushing the logs for a page <u>requires</u> administrative rights.</p>');
+ − 262
if(isset($_POST['_downthejohn']))
+ − 263
{
+ − 264
$template->header();
+ − 265
$result = PageUtils::flushlogs($paths->cpage['urlname_nons'], $paths->namespace);
+ − 266
echo '<p>'.$result.' <a href="'.makeUrl($paths->page).'">Return to the page</a>.</p>';
+ − 267
$template->footer();
+ − 268
break;
+ − 269
}
+ − 270
$template->header();
+ − 271
?>
+ − 272
<form action="<?php echo makeUrl($paths->page, 'do=flushlogs'); ?>" method="post">
+ − 273
<h3>You are about to <span style="color: red;">destroy</span> all logged edits and actions on this page.</h3>
116
77c75179bb95
Made most special pages "visible"; fixup for non-existent special page redirect in paths.php; rewrote Special:AllPages to have pagination (WiP, Special:SpecialPages is possibly next, depending on whether paginate_array works or not)
Dan
diff
changeset
+ − 274
<p>Unlike deleting or editing this page, this action is <u>not reversible</u>! You should only do this if you are desparate for
0
+ − 275
database space.</p>
+ − 276
<p>Do you really want to continue?</p>
+ − 277
<p><input type="submit" name="_downthejohn" value="Flush logs" style="color: red; font-weight: bold;" /></p>
+ − 278
</form>
+ − 279
<?php
+ − 280
$template->footer();
+ − 281
break;
+ − 282
case 'delvote':
+ − 283
if(isset($_POST['_ballotbox']))
+ − 284
{
+ − 285
$template->header();
+ − 286
$result = PageUtils::delvote($paths->cpage['urlname_nons'], $paths->namespace);
+ − 287
echo '<p>'.$result.' <a href="'.makeUrl($paths->page).'">Return to the page</a>.</p>';
+ − 288
$template->footer();
+ − 289
break;
+ − 290
}
+ − 291
$template->header();
+ − 292
?>
+ − 293
<form action="<?php echo makeUrl($paths->page, 'do=delvote'); ?>" method="post">
+ − 294
<h3>Your vote counts.</h3>
+ − 295
<p>If you think that this page is not relavent to the content on this site, or if it looks like this page was only created in
+ − 296
an attempt to spam the site, you can request that this page be deleted by an administrator.</p>
+ − 297
<p>After you vote, you should leave a comment explaining the reason for your vote, especially if you are the first person to
+ − 298
vote against this page.</p>
+ − 299
<p>So far, <?php echo ( $paths->cpage['delvotes'] == 1 ) ? $paths->cpage['delvotes'] . ' person has' : $paths->cpage['delvotes'] . ' people have'; ?> voted to delete this page.</p>
+ − 300
<p><input type="submit" name="_ballotbox" value="Vote to delete this page" /></p>
+ − 301
</form>
+ − 302
<?php
+ − 303
$template->footer();
+ − 304
break;
+ − 305
case 'resetvotes':
+ − 306
if(!$session->get_permissions('vote_reset')) die_friendly('Access denied', '<p>Resetting the deletion votes against this page <u>requires</u> admin rights.</p>');
+ − 307
if(isset($_POST['_youmaylivealittlelonger']))
+ − 308
{
+ − 309
$template->header();
+ − 310
$result = PageUtils::resetdelvotes($paths->cpage['urlname_nons'], $paths->namespace);
+ − 311
echo '<p>'.$result.' <a href="'.makeUrl($paths->page).'">Return to the page</a>.</p>';
+ − 312
$template->footer();
+ − 313
break;
+ − 314
}
+ − 315
$template->header();
+ − 316
?>
+ − 317
<form action="<?php echo makeUrl($paths->page, 'do=resetvotes'); ?>" method="post">
+ − 318
<p>This action will reset the number of votes against this page to zero. Are you sure you want to do this?</p>
+ − 319
<p><input type="submit" name="_youmaylivealittlelonger" value="Reset votes" /></p>
+ − 320
</form>
+ − 321
<?php
+ − 322
$template->footer();
+ − 323
break;
+ − 324
case 'deletepage':
+ − 325
if(!$session->get_permissions('delete_page')) die_friendly('Access denied', '<p>Deleting pages <u>requires</u> admin rights.</p>');
+ − 326
if(isset($_POST['_adiossucker']))
+ − 327
{
28
+ − 328
$reason = ( isset($_POST['reason']) ) ? $_POST['reason'] : false;
+ − 329
if ( empty($reason) )
+ − 330
$error = 'Please enter a reason for deleting this page.';
+ − 331
else
+ − 332
{
+ − 333
$template->header();
+ − 334
$result = PageUtils::deletepage($paths->cpage['urlname_nons'], $paths->namespace, $reason);
+ − 335
echo '<p>'.$result.' <a href="'.makeUrl($paths->page).'">Return to the page</a>.</p>';
+ − 336
$template->footer();
+ − 337
break;
+ − 338
}
0
+ − 339
}
+ − 340
$template->header();
+ − 341
?>
+ − 342
<form action="<?php echo makeUrl($paths->page, 'do=deletepage'); ?>" method="post">
+ − 343
<h3>You are about to <span style="color: red;">destroy</span> this page.</h3>
+ − 344
<p>While the deletion of the page itself is completely reversible, it is impossible to recover any comments or category information on this page. If this is a file page, the file along with all older revisions of it will be permanently deleted. Also, any custom information that this page is tagged with, such as a custom name, protection status, or additional settings such as whether to allow comments, will be permanently lost.</p>
+ − 345
<p>Are you <u>absolutely sure</u> that you want to continue?<br />
+ − 346
You will not be asked again.</p>
28
+ − 347
<?php if ( isset($error) ) echo "<p>$error</p>"; ?>
+ − 348
<p>Reason for deleting: <input type="text" name="reason" size="50" /></p>
0
+ − 349
<p><input type="submit" name="_adiossucker" value="Delete this page" style="color: red; font-weight: bold;" /></p>
+ − 350
</form>
+ − 351
<?php
+ − 352
$template->footer();
+ − 353
break;
+ − 354
case 'setwikimode':
+ − 355
if(!$session->get_permissions('set_wiki_mode')) die_friendly('Access denied', '<p>Changing the wiki mode setting <u>requires</u> admin rights.</p>');
97
+ − 356
if ( isset($_POST['finish']) )
+ − 357
{
+ − 358
$level = intval($_POST['level']);
+ − 359
if ( !in_array($level, array(0, 1, 2) ) )
+ − 360
{
+ − 361
die_friendly('Invalid request', '<p>Level not specified</p>');
+ − 362
}
+ − 363
$q = $db->sql_query('UPDATE '.table_prefix.'pages SET wiki_mode=' . $level . ' WHERE urlname=\'' . $db->escape($paths->cpage['urlname_nons']) . '\' AND namespace=\'' . $paths->namespace . '\';');
+ − 364
if ( !$q )
+ − 365
$db->_die();
+ − 366
redirect(makeUrl($paths->page), htmlspecialchars($paths->cpage['name']), 'Wiki mode for this page has been set. Redirecting you to the page...', 2);
+ − 367
}
+ − 368
else
+ − 369
{
+ − 370
$template->header();
+ − 371
if(!isset($_GET['level']) || ( isset($_GET['level']) && !preg_match('#^([0-9])$#', $_GET['level']))) die_friendly('Invalid request', '<p>Level not specified</p>');
+ − 372
$level = intval($_GET['level']);
+ − 373
if ( !in_array($level, array(0, 1, 2) ) )
+ − 374
{
+ − 375
die_friendly('Invalid request', '<p>Level not specified</p>');
+ − 376
}
+ − 377
echo '<form action="' . makeUrl($paths->page, 'do=setwikimode', true) . '" method="post">';
+ − 378
echo '<input type="hidden" name="finish" value="foo" />';
+ − 379
echo '<input type="hidden" name="level" value="' . $level . '" />';
+ − 380
$level_txt = ( $level == 0 ) ? 'disabled' : ( ( $level == 1 ) ? 'enabled' : 'use the global setting' );
+ − 381
$blurb = ( $level == 0 || ( $level == 2 && getConfig('wiki_mode') != '1' ) ) ? 'Because this will disable the wiki behavior on this page, several features, most
+ − 382
notably the ability for users to vote to have this page deleted, will be disabled as they are not relevant to non-wiki pages. In addition, users will not be able
+ − 383
to edit this page unless an ACL rule specifically permits them.' : 'Because this will enable the wiki behavior on this page, users will gain the ability to
+ − 384
freely edit this page unless an ACL rule specifically denies them. If your site is public and gets good traffic, you should be aware of the possiblity of vandalism, and you need to be ready to revert
+ − 385
malicious edits to this page.';
+ − 386
?>
+ − 387
<h3>You are changing wiki mode for this page.</h3>
+ − 388
<p>Wiki features will be set to <?php echo $level_txt; ?>. <?php echo $blurb; ?></p>
+ − 389
<p>If you want to continue, please click the button below.</p>
+ − 390
<p><input type="submit" value="Set wiki mode" /></p>
+ − 391
<?php
+ − 392
echo '</form>';
+ − 393
$template->footer();
+ − 394
}
0
+ − 395
break;
+ − 396
case 'diff':
+ − 397
$template->header();
+ − 398
$id1 = ( isset($_GET['diff1']) ) ? (int)$_GET['diff1'] : false;
+ − 399
$id2 = ( isset($_GET['diff2']) ) ? (int)$_GET['diff2'] : false;
+ − 400
if(!$id1 || !$id2) { echo '<p>Invalid request.</p>'; $template->footer(); break; }
+ − 401
if(!preg_match('#^([0-9]+)$#', (string)$_GET['diff1']) ||
+ − 402
!preg_match('#^([0-9]+)$#', (string)$_GET['diff2'] )) { echo '<p>SQL injection attempt</p>'; $template->footer(); break; }
+ − 403
echo PageUtils::pagediff($paths->cpage['urlname_nons'], $paths->namespace, $id1, $id2);
+ − 404
$template->footer();
+ − 405
break;
91
+ − 406
case 'detag':
+ − 407
if ( $session->user_level < USER_LEVEL_ADMIN )
+ − 408
{
+ − 409
die_friendly('Access denied', '<p>You need to be an administrator to detag pages.</p>');
+ − 410
}
+ − 411
if ( $paths->page_exists )
+ − 412
{
+ − 413
die_friendly('Invalid request', '<p>The detag action is only valid for pages that have been deleted in the past.</p>');
+ − 414
}
+ − 415
$q = $db->sql_query('DELETE FROM '.table_prefix.'tags WHERE page_id=\'' . $db->escape($paths->cpage['urlname_nons']) . '\' AND namespace=\'' . $paths->namespace . '\';');
+ − 416
if ( !$q )
+ − 417
$db->_die('Detag query, index.php:'.__LINE__);
+ − 418
die_friendly('Page detagged', '<p>All stale tags have been removed from this page.</p>');
+ − 419
break;
0
+ − 420
case 'aclmanager':
+ − 421
$data = ( isset($_POST['data']) ) ? $_POST['data'] : Array('mode' => 'listgroups');
+ − 422
PageUtils::aclmanager($data);
+ − 423
break;
+ − 424
}
42
45ebe475ff75
I dunno how many times I'm gonna have to fix the "problem seems to be the hex conversion" bug, but this is at least the fourth try.
Dan
diff
changeset
+ − 425
0
+ − 426
//
+ − 427
// Optimize HTML by replacing newlines with spaces (excludes <pre>, <script>, and <style> blocks)
+ − 428
//
+ − 429
if ($aggressive_optimize_html)
+ − 430
{
+ − 431
// Load up the HTML
+ − 432
$html = ob_get_contents();
+ − 433
ob_end_clean();
42
45ebe475ff75
I dunno how many times I'm gonna have to fix the "problem seems to be the hex conversion" bug, but this is at least the fourth try.
Dan
diff
changeset
+ − 434
80
cb7dde69c301
Improved and enabled HTML optimization algorithm; enabled gzip compression; added but did not test at all the tag cloud class in includes/tagcloud.php, this is still very preliminary and not ready for any type of production use
Dan
diff
changeset
+ − 435
$html = aggressive_optimize_html($html);
42
45ebe475ff75
I dunno how many times I'm gonna have to fix the "problem seems to be the hex conversion" bug, but this is at least the fourth try.
Dan
diff
changeset
+ − 436
0
+ − 437
// Re-enable output buffering to allow the Gzip function (below) to work
+ − 438
ob_start();
42
45ebe475ff75
I dunno how many times I'm gonna have to fix the "problem seems to be the hex conversion" bug, but this is at least the fourth try.
Dan
diff
changeset
+ − 439
0
+ − 440
// Done, send it to the user
+ − 441
echo( $html );
+ − 442
}
80
cb7dde69c301
Improved and enabled HTML optimization algorithm; enabled gzip compression; added but did not test at all the tag cloud class in includes/tagcloud.php, this is still very preliminary and not ready for any type of production use
Dan
diff
changeset
+ − 443
cb7dde69c301
Improved and enabled HTML optimization algorithm; enabled gzip compression; added but did not test at all the tag cloud class in includes/tagcloud.php, this is still very preliminary and not ready for any type of production use
Dan
diff
changeset
+ − 444
$db->close();
cb7dde69c301
Improved and enabled HTML optimization algorithm; enabled gzip compression; added but did not test at all the tag cloud class in includes/tagcloud.php, this is still very preliminary and not ready for any type of production use
Dan
diff
changeset
+ − 445
gzip_output();
42
45ebe475ff75
I dunno how many times I'm gonna have to fix the "problem seems to be the hex conversion" bug, but this is at least the fourth try.
Dan
diff
changeset
+ − 446
0
+ − 447
?>