\n");
$PageEndFmt = array('
',&$HTMLEndFmt);
$HandleActions = array(
'browse' => 'HandleBrowse', 'print' => 'HandleBrowse',
'edit' => 'HandleEdit', 'source' => 'HandleSource',
'attr' => 'HandleAttr', 'postattr' => 'HandlePostAttr',
'logout' => 'HandleLogoutA', 'login' => 'HandleLoginA');
$HandleAuth = array(
'browse' => 'read', 'source' => 'read', 'print' => 'read',
'edit' => 'edit', 'attr' => 'attr', 'postattr' => 'attr',
'logout' => 'read', 'login' => 'login');
$ActionTitleFmt = array(
'edit' => '| $[Edit]',
'attr' => '| $[Attributes]',
'login' => '| $[Login]');
$DefaultPasswords = array('admin'=>'*','read'=>'','edit'=>'','attr'=>'');
$AuthCascade = array('edit'=>'read', 'attr'=>'edit');
$AuthList = array('' => 1, 'nopass:' => 1, '@nopass' => 1);
$SessionEncode = 'base64_encode';
$SessionDecode = 'base64_decode';
$CallbackFnTemplates = array(
'default' => '%s',
'return' => 'return %s;',
'markup_e' => 'extract($GLOBALS["MarkupToHTML"]); return %s;',
'qualify' => 'extract($GLOBALS["tmp_qualify"]); return %s;',
);
$Conditions['enabled'] = '(boolean)@$GLOBALS[$condparm]';
$Conditions['false'] = 'false';
$Conditions['true'] = 'true';
$Conditions['group'] =
"(boolean)MatchPageNames(\$pagename, FixGlob(\$condparm, '$1$2.*'))";
$Conditions['name'] =
"(boolean)MatchPageNames(\$pagename, FixGlob(\$condparm, '$1*.$2'))";
$Conditions['match'] = 'preg_match("!$condparm!",$pagename)';
$Conditions['authid'] = 'NoCache(@$GLOBALS["AuthId"] > "")';
$Conditions['exists'] = "(boolean)ListPages(FixGlob(
str_replace(array('[[',']]'), array('', ''), \$condparm) , '$1*.$2'))";
$Conditions['equal'] = 'CompareArgs($condparm) == 0';
function CompareArgs($arg)
{ $arg = ParseArgs($arg); return strcmp(@$arg[''][0], @$arg[''][1]); }
$Conditions['auth'] = 'NoCache(CondAuth($pagename, $condparm))';
function CondAuth($pagename, $condparm) {
global $HandleAuth;
@list($level, $pn) = explode(' ', $condparm, 2);
$pn = ($pn > '') ? MakePageName($pagename, $pn) : $pagename;
if (@$HandleAuth[$level]>'') $level = $HandleAuth[$level];
return (boolean)RetrieveAuthPage($pn, $level, false, READPAGE_CURRENT);
}
## CondExpr handles complex conditions (expressions)
## Portions Copyright 2005 by D. Faure (dfaure@cpan.org)
function CondExpr($pagename, $condname, $condparm) {
global $CondExprOps;
SDV($CondExprOps, 'and|x?or|&&|\\|\\||[!()]');
if ($condname == '(' || $condname == '[')
$condparm = preg_replace('/[\\]\\)]\\s*$/', '', $condparm);
$condparm = str_replace('&&', '&&', $condparm);
$terms = preg_split("/(? $t) {
$t = trim($t);
if (preg_match("/^($CondExprOps)$/i", $t)) continue;
if ($t) $terms[$i] = CondText($pagename, "if $t", 'TRUE') ? '1' : '0';
}
return @eval('return(' . implode(' ', $terms) . ');');
}
$Conditions['expr'] = 'CondExpr($pagename, $condname, $condparm)';
$Conditions['('] = 'CondExpr($pagename, $condname, $condparm)';
$Conditions['['] = 'CondExpr($pagename, $condname, $condparm)';
$MarkupTable['_begin']['seq'] = 'B';
$MarkupTable['_end']['seq'] = 'E';
Markup('fulltext','>_begin');
Markup('split','>fulltext',"\n",
'$RedoMarkupLine=1; return explode("\n",$x);');
Markup('directives','>split');
Markup('inline','>directives');
Markup('links','>inline');
Markup('block','>links');
Markup('style','>block');
Markup_e('closeall', '_begin',
'/^\\(:closeall:\\)$/',
"'<:block>' . MarkupClose()");
$ImgExtPattern="\\.(?:gif|jpg|jpeg|png|GIF|JPG|JPEG|PNG)";
$ImgTagFmt="- ','
- ','
- ','','
- ','
- ','
','','
',0), 'indent' => array("","
",'
',1),
'outdent' =>
array("","
",'
',1),
'pre' => array('','','',0), 'table' => array("
'.PHSC(print_r($x, true)).''; } function PSS($x) { return str_replace('\\"','"',$x); } function PVS($x) { return preg_replace("/\n[^\\S\n]*(?=\n)/", "\n<:vspace>", $x); } function PVSE($x) { return PVS(PHSC($x, ENT_NOQUOTES)); } function PZZ($x,$y='') { return ''; } function PRR($x=NULL) { if ($x || is_null($x)) $GLOBALS['RedoMarkupLine']++; return $x; } function PUE($x) { return PPRE('/[\\x80-\\xff \'"<>]/', "'%'.dechex(ord(\$m[0]))", $x); } function PQA($x) { $out = ''; if (preg_match_all('/([a-zA-Z][-\\w]*)\\s*=\\s*("[^"]*"|\'[^\']*\'|\\S*)/', $x, $attr, PREG_SET_ORDER)) { foreach($attr as $a) { if (preg_match('/^on/i', $a[1])) continue; $out .= $a[1] . '=' . PPRE( '/^([\'"]?)(.*)\\1$/', "\"'\".str_replace(\"'\", ''', \$m[2]).\"'\"", $a[2]) . ' '; } } return $out; } function SDV(&$v,$x) { if (!isset($v)) $v=$x; } function SDVA(&$var,$val) { foreach($val as $k=>$v) if (!isset($var[$k])) $var[$k]=$v; } function IsEnabled(&$var,$f=0) { return (isset($var)) ? $var : $f; } function SetTmplDisplay($var, $val) { NoCache(); $GLOBALS['TmplDisplay'][$var] = $val; } function NoCache($x = '') { $GLOBALS['NoHTMLCache'] |= 1; return $x; } function ParseArgs($x, $optpat = '(?>(\\w+)[:=])') { $z = array(); preg_match_all("/($optpat|[-+])?(\"[^\"]*\"|'[^']*'|\\S+)/", $x, $terms, PREG_SET_ORDER); foreach($terms as $t) { $v = preg_replace('/^([\'"])?(.*)\\1$/', '$2', $t[3]); if ($t[2]) { $z['#'][] = $t[2]; $z[$t[2]] = $v; } else { $z['#'][] = $t[1]; $z[$t[1]][] = $v; } $z['#'][] = $v; } return $z; } function PHSC($x, $flags=ENT_COMPAT, $enc=null) { # for PHP 5.4 if(is_null($enc)) $enc = "ISO-8859-1"; # $GLOBALS['Charset'] return htmlspecialchars($x, $flags, $enc); } function PCCF($code, $template = 'default', $args = '$m') { global $CallbackFnTemplates, $CallbackFunctions; if(!isset($CallbackFnTemplates[$template])) Abort("No \$CallbackFnTemplates[$template])."); $code = sprintf($CallbackFnTemplates[$template], $code); if(!isset($CallbackFunctions[$code])) { $fn = create_function($args, $code); if($fn) $CallbackFunctions[$code] = $fn; else StopWatch("Failed to create callback function: $code"); } return $CallbackFunctions[$code]; } function PPRE($pat, $rep, $x) { $lambda = PCCF("return $rep;"); return preg_replace_callback($pat, $lambda, $x); } function PPRA($array, $x) { foreach($array as $pat => $rep) { $fmt = $x; # for $FmtP if(is_callable($rep) && $rep != '_') $x = preg_replace_callback($pat,$rep,$x); else $x = preg_replace($pat,$rep,$x); } return $x; } function StopWatch($x) { global $StopWatch, $EnableStopWatch; if (!$EnableStopWatch) return; static $wstart = 0, $ustart = 0; list($usec,$sec) = explode(' ',microtime()); $wtime = ($sec+$usec); if (!$wstart) $wstart = $wtime; if ($EnableStopWatch != 2) { $StopWatch[] = sprintf("%05.2f %s", $wtime-$wstart, $x); return; } $dat = getrusage(); $utime = ($dat['ru_utime.tv_sec']+$dat['ru_utime.tv_usec']/1000000); if (!$ustart) $ustart=$utime; $StopWatch[] = sprintf("%05.2f %05.2f %s", $wtime-$wstart, $utime-$ustart, $x); } ## DRange converts a variety of string formats into date (ranges). ## It returns the start and end timestamps (+1 second) of the specified date. function DRange($when) { global $Now; ## unix/posix @timestamp dates if (preg_match('/^\\s*@(\\d+)\\s*(.*)$/', $when, $m)) { $t0 = $m[2] ? strtotime($m[2], $m[1]) : $m[1]; return array($t0, $t0+1); } ## ISO-8601 dates $dpat = '/ (?'' && @$m[5] == '') { @$n[4]++; } ## if no day given, assume 1st of month and full month range if (@$m[4] == '') { $m[4] = 1; $n[4] = 1; $n[3]++; } ## if no seconds given, assume range of 1 minute (except when full day) if (@$m[7]>'' && @$m[8] == '') { @$n[7]++; } $t0 = @mktime($m[5], $m[7], $m[8], $m[3], $m[4], $m[1]); $t1 = @mktime($n[5], $n[7], $n[8], $n[3], $n[4], $n[1]); return array($t0, $t1); } ## now, today, tomorrow, yesterday NoCache(); if ($when == 'now') return array($Now, $Now+1); $m = localtime(time()); if ($when == 'tomorrow') { $m[3]++; $when = 'today'; } if ($when == 'yesterday') { $m[3]--; $when = 'today'; } if ($when == 'today') return array(mktime(0, 0, 0, $m[4]+1, $m[3] , $m[5]+1900), mktime(0, 0, 0, $m[4]+1, $m[3]+1, $m[5]+1900)); if (preg_match('/^\\s*$/', $when)) return array(-1, -1); $t0 = strtotime($when); $t1 = strtotime("+1 day", $t0); return array($t0, $t1); } ## AsSpaced converts a string with WikiWords into a spaced version ## of that string. (It can be overridden via $AsSpacedFunction.) function AsSpaced($text) { $text = preg_replace("/([[:lower:]\\d])([[:upper:]])/", '$1 $2', $text); $text = preg_replace('/([^-\\d])(\\d[-\\d]*( |$))/','$1 $2',$text); return preg_replace("/([[:upper:]])([[:upper:]][[:lower:]\\d])/", '$1 $2', $text); } ## Lock is used to make sure only one instance of PmWiki is running when ## files are being written. It does not "lock pages" for editing. function Lock($op) { global $WorkDir, $LockFile, $EnableReadOnly; if ($op > 0 && IsEnabled($EnableReadOnly, 0)) Abort('Cannot modify site -- $EnableReadOnly is set', 'readonly'); SDV($LockFile, "$WorkDir/.flock"); mkdirp(dirname($LockFile)); static $lockfp,$curop; if (!$lockfp) $lockfp = @fopen($LockFile, "w"); if (!$lockfp) { if ($op <= 0) return; @unlink($LockFile); $lockfp = fopen($LockFile,"w") or Abort('Cannot acquire lockfile', 'flock'); fixperms($LockFile); } if ($op<0) { flock($lockfp,LOCK_UN); fclose($lockfp); $lockfp=0; $curop=0; } elseif ($op==0) { flock($lockfp,LOCK_UN); $curop=0; } elseif ($op==1 && $curop<1) { session_write_close(); flock($lockfp,LOCK_SH); $curop=1; } elseif ($op==2 && $curop<2) { session_write_close(); flock($lockfp,LOCK_EX); $curop=2; } } ## mkdirp creates a directory and its parents as needed, and sets ## permissions accordingly. function mkdirp($dir) { global $ScriptUrl; if (file_exists($dir)) return; if (!file_exists(dirname($dir))) mkdirp(dirname($dir)); if (mkdir($dir, 0777)) { fixperms($dir); if (@touch("$dir/xxx")) { unlink("$dir/xxx"); return; } rmdir($dir); } $parent = realpath(dirname($dir)); $bdir = basename($dir); $perms = decoct(fileperms($parent) & 03777); $msg = "PmWiki needs to have a writable $dir/ directory before it can continue. You can create the directory manually by executing the following commands on your server:
mkdir $parent/$bdir\n chmod 777 $parent/$bdirThen, reload this page."; $safemode = ini_get('safe_mode'); if (!$safemode) $msg .= "
Or, for a slightly more secure installation, try executing
chmod 2777 $parenton your server and following this link. Afterwards you can restore the permissions to their current setting by executing
chmod $perms $parent."; Abort($msg); } ## fixperms attempts to correct permissions on a file or directory ## so that both PmWiki and the account (current dir) owner can manipulate it function fixperms($fname, $add = 0, $set = 0) { clearstatcache(); if (!file_exists($fname)) Abort('?no such file'); if ($set) { # advanced admins, $UploadPermSet if (fileperms($fname) != $set) @chmod($fname,$set); } else { $bp = 0; if (fileowner($fname)!=@fileowner('.') && @fileowner('.')!==0) $bp = (is_dir($fname)) ? 007 : 006; if (filegroup($fname)==@filegroup('.')) $bp <<= 3; $bp |= $add; if ($bp && (fileperms($fname) & $bp) != $bp) @chmod($fname,fileperms($fname)|$bp); } } ## GlobToPCRE converts wildcard patterns into pcre patterns for ## inclusion and exclusion. Wildcards beginning with '-' or '!' ## are treated as things to be excluded. function GlobToPCRE($pat) { $pat = preg_quote($pat, '/'); $pat = str_replace(array('\\*', '\\?', '\\[', '\\]', '\\^', '\\-', '\\!'), array('.*', '.', '[', ']', '^', '-', '!'), $pat); $excl = array(); $incl = array(); foreach(preg_split('/,+\s?/', $pat, -1, PREG_SPLIT_NO_EMPTY) as $p) { if ($p{0} == '-' || $p{0} == '!') $excl[] = '^'.substr($p, 1).'$'; else $incl[] = "^$p$"; } return array(implode('|', $incl), implode('|', $excl)); } ## FixGlob changes wildcard patterns without '.' to things like ## '*.foo' (name matches) or 'foo.*' (group matches). function FixGlob($x, $rep = '$1*.$2') { return preg_replace('/([\\s,][-!]?)([^\\/.\\s,]+)(?=[\\s,])/', $rep, ",$x,"); } ## MatchPageNames reduces $pagelist to those pages with names ## matching the pattern(s) in $pat. Patterns can be either ## regexes to include ('/'), regexes to exclude ('!'), or ## wildcard patterns (all others). function MatchPageNames($pagelist, $pat) { global $Charset, $EnableRangeMatchUTF8; # allow range matches in utf8; doesn't work on pmwiki.org and possibly elsewhere $pcre8 = (IsEnabled($EnableRangeMatchUTF8,0) && $Charset=='UTF-8')? 'u' : ''; $pagelist = (array)$pagelist; foreach((array)$pat as $p) { if (count($pagelist) < 1) break; if (!$p) continue; switch ($p{0}) { case '/': $pagelist = preg_grep($p, $pagelist); continue; case '!': $pagelist = array_diff($pagelist, preg_grep($p, $pagelist)); continue; default: list($inclp, $exclp) = GlobToPCRE(str_replace('/', '.', $p)); if ($exclp) $pagelist = array_diff($pagelist, preg_grep("/$exclp/i$pcre8", $pagelist)); if ($inclp) $pagelist = preg_grep("/$inclp/i$pcre8", $pagelist); } } return $pagelist; } ## ResolvePageName "normalizes" a pagename based on the current ## settings of $DefaultPage and $PagePathFmt. It's normally used ## during initialization to fix up any missing or partial pagenames. function ResolvePageName($pagename) { global $DefaultPage, $DefaultGroup, $DefaultName, $GroupPattern, $NamePattern, $EnableFixedUrlRedirect; SDV($DefaultPage, "$DefaultGroup.$DefaultName"); $pagename = preg_replace('!([./][^./]+)\\.html$!', '$1', $pagename); if ($pagename == '') return $DefaultPage; $p = MakePageName($DefaultPage, $pagename); if (!preg_match("/^($GroupPattern)[.\\/]($NamePattern)$/i", $p)) { header('HTTP/1.1 404 Not Found'); Abort('$[?invalid page name]'); } if (preg_match("/^($GroupPattern)[.\\/]($NamePattern)$/i", $pagename)) return $p; if (IsEnabled($EnableFixedUrlRedirect, 1) && $p && (PageExists($p) || preg_match('/[\\/.]/', $pagename))) { Redirect($p); exit(); } return MakePageName($DefaultPage, "$pagename.$pagename"); } ## MakePageName is used to convert a string $str into a fully-qualified ## pagename. If $str doesn't contain a group qualifier, then ## MakePageName uses $basepage and $PagePathFmt to determine the ## group of the returned pagename. function MakePageName($basepage, $str) { global $MakePageNameFunction, $PageNameChars, $PagePathFmt, $MakePageNamePatterns, $MakePageNameSplitPattern; if (@$MakePageNameFunction) return $MakePageNameFunction($basepage, $str); SDV($PageNameChars,'-[:alnum:]'); SDV($MakePageNamePatterns, array( "/'/" => '', # strip single-quotes "/[^$PageNameChars]+/" => ' ', # convert everything else to space '/((^|[^-\\w])\\w)/' => PCCF("return strtoupper(\$m[1]);"), '/ /' => '')); SDV($MakePageNameSplitPattern, '/[.\\/]/'); $str = preg_replace('/[#?].*$/', '', $str); $m = preg_split($MakePageNameSplitPattern, $str); if (count($m)<1 || count($m)>2 || $m[0]=='') return ''; ## handle "Group.Name" conversions if (@$m[1] > '') { $group = PPRA($MakePageNamePatterns, $m[0]); $name = PPRA($MakePageNamePatterns, $m[1]); return "$group.$name"; } $name = PPRA($MakePageNamePatterns, $m[0]); $isgrouphome = count($m) > 1; foreach((array)$PagePathFmt as $pg) { if ($isgrouphome && strncmp($pg, '$1.', 3) !== 0) continue; $pn = FmtPageName(str_replace('$1', $name, $pg), $basepage); if (PageExists($pn)) return $pn; } if ($isgrouphome) { foreach((array)$PagePathFmt as $pg) if (strncmp($pg, '$1.', 3) == 0) return FmtPageName(str_replace('$1', $name, $pg), $basepage); return "$name.$name"; } return preg_replace('/[^\\/.]+$/', $name, $basepage); } ## MakeBaseName uses $BaseNamePatterns to return the "base" form ## of a given pagename -- i.e., stripping any recipe-defined ## prefixes or suffixes from the page. function MakeBaseName($pagename, $patlist = NULL) { global $BaseNamePatterns; if (is_null($patlist)) $patlist = (array)@$BaseNamePatterns; foreach($patlist as $pat => $rep) $pagename = preg_replace($pat, $rep, $pagename); # TODO return $pagename; } ## PCache caches basic information about a page and its attributes-- ## usually everything except page text and page history. This makes ## for quicker access to certain values in PageVar below. function PCache($pagename, $page) { global $PCache; foreach($page as $k=>$v) if ($k!='text' && strpos($k,':')===false) $PCache[$pagename][$k]=$v; } ## SetProperty saves a page property into $PCache. For convenience ## it returns the $value of the property just set. If $sep is supplied, ## then $value is appended to the current property (with $sep as ## as separator) instead of replacing it. If $keep is suplied and the ## property already exists, then $value will be ignored. function SetProperty($pagename, $prop, $value, $sep=NULL, $keep=NULL) { global $PCache, $KeepToken; NoCache(); $prop = "=p_$prop"; $value = PPRE("/$KeepToken(\\d.*?)$KeepToken/", "\$GLOBALS['KPV'][\$m[1]]", $value); if (!is_null($sep) && isset($PCache[$pagename][$prop])) $value = $PCache[$pagename][$prop] . $sep . $value; if (is_null($keep) || !isset($PCache[$pagename][$prop])) $PCache[$pagename][$prop] = $value; return $PCache[$pagename][$prop]; } ## PageTextVar loads a page's text variables (defined by ## $PageTextVarPatterns) into a page's $PCache entry, and returns ## the property associated with $var. function PageTextVar($pagename, $var) { global $PCache, $PageTextVarPatterns, $MaxPageTextVars; SDV($MaxPageTextVars, 500); static $status; if(@$status["$pagename:$var"]++ > $MaxPageTextVars) return ''; if (!@$PCache[$pagename]['=pagetextvars']) { $pc = &$PCache[$pagename]; $pc['=pagetextvars'] = 1; $page = RetrieveAuthPage($pagename, 'read', false, READPAGE_CURRENT); if ($page) { foreach((array)$PageTextVarPatterns as $pat) if (preg_match_all($pat, IsEnabled($PCache[$pagename]['=preview'],@$page['text']), $match, PREG_SET_ORDER)) foreach($match as $m) { $t = preg_replace("/\\{\\$:{$m[2]}\\}/", '', $m[3]); $pc["=p_{$m[2]}"] = Qualify($pagename, $t); } } } return @$PCache[$pagename]["=p_$var"]; } function PageVar($pagename, $var, $pn = '') { global $Cursor, $PCache, $FmtPV, $AsSpacedFunction, $ScriptUrl, $EnablePathInfo; if ($var == '$ScriptUrl') return PUE($ScriptUrl); if ($pn) { $pn = isset($Cursor[$pn]) ? $Cursor[$pn] : MakePageName($pagename, $pn); } else $pn = $pagename; if ($pn) { if (preg_match('/^(.+)[.\\/]([^.\\/]+)$/', $pn, $match) && !isset($PCache[$pn]['time']) && (!@$FmtPV[$var] || strpos($FmtPV[$var], '$page') !== false)) { $page = ReadPage($pn, READPAGE_CURRENT); PCache($pn, $page); } @list($d, $group, $name) = $match; $page = &$PCache[$pn]; if(strpos($FmtPV[$var], '$authpage') !== false) { if(!isset($page['=auth']['read'])) { $x = RetrieveAuthPage($pn, 'read', false, READPAGE_CURRENT); if($x) PCache($pn, $x); } if(@$page['=auth']['read']) $authpage = &$page; } } else { $group = ''; $name = ''; } if (@$FmtPV[$var]) return eval("return ({$FmtPV[$var]});"); if (strncmp($var, '$:', 2)==0) return PageTextVar($pn, substr($var, 2)); return ''; } ## FmtPageName handles $[internationalization] and $Variable ## substitutions in strings based on the $pagename argument. function FmtPageName($fmt, $pagename) { # Perform $-substitutions on $fmt relative to page given by $pagename global $GroupPattern, $NamePattern, $EnablePathInfo, $ScriptUrl, $GCount, $UnsafeGlobals, $FmtV, $FmtP, $FmtPV, $PCache, $AsSpacedFunction; if (strpos($fmt,'$')===false) return $fmt; $fmt = PPRE('/\\$([A-Z]\\w*Fmt)\\b/','$GLOBALS[$m[1]]',$fmt); $fmt = PPRE('/\\$\\[(?>([^\\]]+))\\]/',"XL(\$m[1])",$fmt); $fmt = str_replace('{$ScriptUrl}', '$ScriptUrl', $fmt); $fmt = PPRE('/\\{(\\$[A-Z]\\w+)\\}/', "PageVar('$pagename', \$m[1])", $fmt); if (strpos($fmt,'$')===false) return $fmt; if ($FmtP) $fmt = PPRA($FmtP, $fmt); # FIXME static $pv, $pvpat; if ($pv != count($FmtPV)) { $pvpat = str_replace('$', '\\$', implode('|', array_keys($FmtPV))); $pv = count($FmtPV); } $fmt = PPRE("/(?:$pvpat)\\b/", "PageVar('$pagename', \$m[0])", $fmt); $fmt = PPRE('!\\$ScriptUrl/([^?#\'"\\s<>]+)!', (@$EnablePathInfo) ? "'$ScriptUrl/'.PUE(\$m[1])" : "'$ScriptUrl?n='.str_replace('/','.',PUE(\$m[1]))", $fmt); if (strpos($fmt,'$')===false) return $fmt; static $g; if ($GCount != count($GLOBALS)+count($FmtV)) { $g = array(); foreach($GLOBALS as $n=>$v) { if (is_array($v) || is_object($v) || isset($FmtV["\$$n"]) || in_array($n,$UnsafeGlobals)) continue; $g["\$$n"] = $v; } $GCount = count($GLOBALS)+count($FmtV); krsort($g); reset($g); } $fmt = str_replace(array_keys($g),array_values($g),$fmt); $fmt = PPRE('/(?>(\\$[[:alpha:]]\\w+))/', "isset(\$GLOBALS['FmtV'][\$m[1]]) ? \$GLOBALS['FmtV'][\$m[1]] : \$m[1]", $fmt); return $fmt; } ## FmtPageTitle returns the page title, or the page name ## It localizes standard technical pages (RecentChanges...) function FmtPageTitle($title, $name, $spaced=0) { if($title>'') return str_replace("$", "$", $title); global $SpaceWikiWords, $AsSpacedFunction; if(preg_match("/^(Site(Admin)? |(All)?(Site|Group)(Header|Footer|Attributes) |(Side|Left|Right)Bar |(Wiki)?Sand[Bb]ox |(All)?Recent(Changes|Uploads)|(Auth|Edit)Form |InterMap|PageActions|\\w+QuickReference|\\w+Templates |NotifyList|AuthUser|ApprovedUrls|(Block|Auth)List )$/x", $name) && $name != XL($name)) return XL($name); return ($spaced || $SpaceWikiWords) ? $AsSpacedFunction($name) : $name; } ## FmtTemplateVars uses $vars to replace all occurrences of ## {$$key} in $text with $vars['key']. function FmtTemplateVars($text, $vars, $pagename = NULL) { global $FmtPV, $EnableUndefinedTemplateVars; if ($pagename) { $pat = implode('|', array_map('preg_quote', array_keys($FmtPV))); $text = PPRE("/\\{\\$($pat)\\}/", "PageVar('$pagename', \$m[1])", $text); } foreach(preg_grep('/^[\\w$]/', array_keys($vars)) as $k) if (!is_array($vars[$k])) $text = str_replace("{\$\$$k}", $vars[$k], $text); if(! IsEnabled($EnableUndefinedTemplateVars, 0)) $text = preg_replace("/\\{\\$\\$\\w+\\}/", '', $text); return $text; } ## The XL functions provide translation tables for $[i18n] strings ## in FmtPageName(). function XL($key) { global $XL,$XLLangs; foreach($XLLangs as $l) if (isset($XL[$l][$key])) return $XL[$l][$key]; return $key; } function XLSDV($lang,$a) { global $XL; foreach($a as $k=>$v) { if (!isset($XL[$lang][$k])) { if(preg_match('/^e_(rows|cols)$/', $k)) $v = intval($v); elseif(preg_match('/^ak_/', $k)) $v = $v{0}; $XL[$lang][$k]=$v; } } } function XLPage($lang,$p,$nohtml=false) { global $TimeFmt,$XLLangs,$FarmD, $EnableXLPageScriptLoad; $page = ReadPage($p, READPAGE_CURRENT); if (!$page) return; $text = preg_replace("/=>\\s*\n/",'=> ',@$page['text']); foreach(explode("\n",$text) as $l) if (preg_match('/^\\s*[\'"](.+?)[\'"]\\s*=>\\s*[\'"](.+)[\'"]/',$l,$m)) $xl[stripslashes($m[1])] = stripslashes($nohtml? PHSC($m[2]): $m[2]); if (isset($xl)) { if (IsEnabled($EnableXLPageScriptLoad, 0) && @$xl['xlpage-i18n']) { $i18n = preg_replace('/[^-\\w]/','',$xl['xlpage-i18n']); include_once("$FarmD/scripts/xlpage-$i18n.php"); } if (@$xl['Locale']) setlocale(LC_ALL,$xl['Locale']); if (@$xl['TimeFmt']) $TimeFmt=$xl['TimeFmt']; if (!in_array($lang, $XLLangs)) array_unshift($XLLangs, $lang); XLSDV($lang,$xl); } } ## CmpPageAttr is used with uksort to order a page's elements with ## the latest items first. This can make some operations more efficient. function CmpPageAttr($a, $b) { @list($x, $agmt) = explode(':', $a); @list($x, $bgmt) = explode(':', $b); if ($agmt != $bgmt) return ($agmt==0 || $bgmt==0) ? $agmt - $bgmt : $bgmt - $agmt; return strcmp($a, $b); } ## class PageStore holds objects that store pages via the native ## filesystem. class PageStore { var $dirfmt; var $iswrite; var $encodefilenames; var $attr; var $recodefn; function PageStore($d='$WorkDir/$FullName', $w=0, $a=NULL) { $this->dirfmt = $d; $this->iswrite = $w; $this->attr = (array)$a; $GLOBALS['PageExistsCache'] = array(); # can we rely on iconv() or on mb_convert_encoding() ? if (function_exists('iconv') && @iconv("UTF-8", "WINDOWS-1252//IGNORE", "te\xd0\xafst")=='test' ) $this->recodefn = create_function('$s,$from,$to', 'return @iconv($from,"$to//IGNORE",$s);'); elseif (function_exists('mb_convert_encoding') && @mb_convert_encoding("te\xd0\xafst", "WINDOWS-1252", "UTF-8")=="te?st") $this->recodefn = create_function('$s,$from,$to', 'return @mb_convert_encoding($s,$to,$from);'); else $this->recodefn = false; } function pagefile($pagename) { global $FarmD; $dfmt = $this->dirfmt; if ($pagename > '') { $pagename = str_replace('/', '.', $pagename); if ($dfmt == 'wiki.d/{$FullName}') # optimizations for return $this->PFE("wiki.d/$pagename"); # standard locations if ($dfmt == '$FarmD/wikilib.d/{$FullName}') # return $this->PFE("$FarmD/wikilib.d/$pagename"); if ($dfmt == 'wiki.d/{$Group}/{$FullName}') return $this->PFE(preg_replace('/([^.]+).*/', 'wiki.d/$1/$0', $pagename)); } return $this->PFE(FmtPageName($dfmt, $pagename)); } function PFE($f) { # pagefile_encode if (!$this->encodefilenames) return $f; global $PageFileEncodeFunction; return $PageFileEncodeFunction($f); } function PFD($f) { # pagefile_decode if (!$this->encodefilenames) return $f; global $PageFileDecodeFunction; return $PageFileDecodeFunction($f); } function read($pagename, $since=0) { $newline = ''; $urlencoded = false; $pagefile = $this->pagefile($pagename); if ($pagefile && ($fp=@fopen($pagefile, "r"))) { $page = $this->attr; while (!feof($fp)) { $line = fgets($fp, 4096); while (substr($line, -1, 1) != "\n" && !feof($fp)) { $line .= fgets($fp, 4096); } $line = rtrim($line); if ($urlencoded) $line = urldecode(str_replace('+', '%2b', $line)); @list($k,$v) = explode('=', $line, 2); if (!$k) continue; if ($k == 'version') { $ordered = (strpos($v, 'ordered=1') !== false); $urlencoded = (strpos($v, 'urlencoded=1') !== false); if (strpos($v, 'pmwiki-0.')!==false) $newline="\262"; } if ($k == 'newline') { $newline = $v; continue; } if ($since > 0 && preg_match('/:(\\d+)/', $k, $m) && $m[1] < $since) { if ($ordered) break; continue; } if ($newline) $v = str_replace($newline, "\n", $v); $page[$k] = $v; } fclose($fp); } return $this->recode($pagename, @$page); } function write($pagename,$page) { global $Now, $Version, $Charset; $page['charset'] = $Charset; $page['name'] = $pagename; $page['time'] = $Now; $page['host'] = $_SERVER['REMOTE_ADDR']; $page['agent'] = @$_SERVER['HTTP_USER_AGENT']; $page['rev'] = @$page['rev']+1; unset($page['version']); unset($page['newline']); uksort($page, 'CmpPageAttr'); $s = false; $pagefile = $this->pagefile($pagename); $dir = dirname($pagefile); mkdirp($dir); if (!file_exists("$dir/.htaccess") && $fp = @fopen("$dir/.htaccess", "w")) { fwrite($fp, "Order Deny,Allow\nDeny from all\n"); fclose($fp); } if ($pagefile && ($fp=fopen("$pagefile,new","w"))) { $r0 = array('%', "\n", '<'); $r1 = array('%25', '%0a', '%3c'); $x = "version=$Version ordered=1 urlencoded=1\n"; $s = true && fputs($fp, $x); $sz = strlen($x); foreach($page as $k=>$v) if ($k > '' && $k{0} != '=') { $x = str_replace($r0, $r1, "$k=$v") . "\n"; $s = $s && fputs($fp, $x); $sz += strlen($x); } $s = fclose($fp) && $s; $s = $s && (filesize("$pagefile,new") > $sz * 0.95); if (file_exists($pagefile)) $s = $s && unlink($pagefile); $s = $s && rename("$pagefile,new", $pagefile); } $s && fixperms($pagefile); if (!$s) Abort("Cannot write page to $pagename ($pagefile)...changes not saved"); PCache($pagename, $page); } function exists($pagename) { if (!$pagename) return false; $pagefile = $this->pagefile($pagename); return ($pagefile && file_exists($pagefile)); } function delete($pagename) { global $Now; $pagefile = $this->pagefile($pagename); @rename($pagefile,"$pagefile,del-$Now"); } function ls($pats=NULL) { global $GroupPattern, $NamePattern; StopWatch("PageStore::ls begin {$this->dirfmt}"); $pats=(array)$pats; array_push($pats, "/^$GroupPattern\.$NamePattern$/"); $dir = $this->pagefile('$Group.$Name'); $maxslash = substr_count($dir, '/'); $dirlist = array(preg_replace('!/*[^/]*\\$.*$!','',$dir)); $out = array(); while (count($dirlist)>0) { $dir = array_shift($dirlist); $dfp = @opendir($dir); if (!$dfp) { continue; } $dirslash = substr_count($dir, '/') + 1; $o = array(); while ( ($pagefile = readdir($dfp)) !== false) { if ($pagefile{0} == '.') continue; if ($dirslash < $maxslash && is_dir("$dir/$pagefile")) { array_push($dirlist,"$dir/$pagefile"); continue; } if ($dirslash == $maxslash) $o[] = $this->PFD($pagefile); } closedir($dfp); StopWatch("PageStore::ls merge {$this->dirfmt}"); $out = array_merge($out, MatchPageNames($o, $pats)); } StopWatch("PageStore::ls end {$this->dirfmt}"); return $out; } function recode($pagename, $a) { if(!$a) return false; global $Charset, $PageRecodeFunction, $DefaultPageCharset, $EnableOldCharset; if (function_exists($PageRecodeFunction)) return $PageRecodeFunction($a); if (IsEnabled($EnableOldCharset)) $a['=oldcharset'] = @$a['charset']; SDVA($DefaultPageCharset, array(''=>@$Charset)); # pre-2.2.31 RecentChanges if (@$DefaultPageCharset[$a['charset']]>'') # wrong pre-2.2.30 encs. *-2, *-9, *-13 $a['charset'] = $DefaultPageCharset[@$a['charset']]; if (!$a['charset'] || $Charset==$a['charset']) return $a; $from = ($a['charset']=='ISO-8859-1') ? 'WINDOWS-1252' : $a['charset']; $to = ($Charset=='ISO-8859-1') ? 'WINDOWS-1252' : $Charset; if ($this->recodefn) $F = $this->recodefn; elseif ($to=='UTF-8' && $from=='WINDOWS-1252') # utf8 wiki & pre-2.2.30 doc $F = create_function('$s,$from,$to', 'return utf8_encode($s);'); elseif ($to=='WINDOWS-1252' && $from=='UTF-8') # 2.2.31+ documentation $F = create_function('$s,$from,$to', 'return utf8_decode($s);'); else return $a; foreach($a as $k=>$v) $a[$k] = $F($v,$from,$to); $a['charset'] = $Charset; return $a; } } function ReadPage($pagename, $since=0) { # read a page from the appropriate directories given by $WikiReadDirsFmt. global $WikiLibDirs,$Now; foreach ($WikiLibDirs as $dir) { $page = $dir->read($pagename, $since); if ($page) break; } if (@!$page) $page['ctime'] = $Now; if (@!$page['time']) $page['time'] = $Now; return $page; } function WritePage($pagename,$page) { global $WikiLibDirs,$WikiDir,$LastModFile; $WikiDir->iswrite = 1; for($i=0; $i
$[PmWiki can't process your request]
$msg
$[We are sorry for any inconvenience].
$info "; @header("Content-type: text/html; charset=$Charset"); echo PPRE('/\\$\\[([^\\]]+)\\]/', "XL(\$m[1])", $msg); exit; } function Redirect($pagename, $urlfmt='$PageUrl') { # redirect the browser to $pagename global $EnableRedirect, $RedirectDelay, $EnableStopWatch; SDV($RedirectDelay, 0); clearstatcache(); $pageurl = FmtPageName($urlfmt,$pagename); if (IsEnabled($EnableRedirect,1) && (!isset($_REQUEST['redirect']) || $_REQUEST['redirect'])) { header("Location: $pageurl"); header("Content-type: text/html"); echo "($[redirected from] {\$FullName})
\n"); if (@!$_GET['from']) { $opt['redirect'] = 1; $PageRedirectFmt = ''; } else { $frompage = MakePageName($pagename, $_GET['from']); $PageRedirectFmt = (!$frompage) ? '' : FmtPageName($PageRedirectFmt, $frompage); } if (@$EnableHTMLCache && !$NoHTMLCache && $PageCacheFile && @filemtime($PageCacheFile) > $LastModTime) { list($ctext) = unserialize(file_get_contents($PageCacheFile)); $FmtV['$PageText'] = "$ctext"; $IsHTMLCached = 1; StopWatch("HandleBrowse: using cached copy"); } else { $IsHTMLCached = 0; $text = '(:groupheader:)'.@$text.'(:groupfooter:)'; $t1 = time(); $FmtV['$PageText'] = MarkupToHTML($pagename, $text, $opt); if (@$EnableHTMLCache > 0 && !$NoHTMLCache && $PageCacheFile && (time() - $t1 + 1) >= $EnableHTMLCache) { $fp = @fopen("$PageCacheFile,new", "x"); if ($fp) { StopWatch("HandleBrowse: caching page"); fwrite($fp, serialize(array($FmtV['$PageText']))); fclose($fp); rename("$PageCacheFile,new", $PageCacheFile); } } } SDV($HandleBrowseFmt,array(&$PageStartFmt, &$PageRedirectFmt, '$PageText', &$PageEndFmt)); PrintFmt($pagename,$HandleBrowseFmt); } ## UpdatePage goes through all of the steps needed to update a page, ## preserving page history, computing link targets, page titles, ## and other page attributes. It does this by calling each entry ## in $EditFunctions. $pagename is the name of the page to be updated, ## $page is the old version of the page (used for page history), ## $new is the new version of the page to be saved, and $fnlist is ## an optional list of functions to use instead of $EditFunctions. function UpdatePage(&$pagename, &$page, &$new, $fnlist = NULL) { global $EditFunctions, $IsPagePosted; StopWatch("UpdatePage: begin $pagename"); if (is_null($fnlist)) $fnlist = $EditFunctions; $IsPagePosted = false; foreach((array)$fnlist as $fn) { StopWatch("UpdatePage: $fn ($pagename)"); $fn($pagename, $page, $new); } StopWatch("UpdatePage: end $pagename"); return $IsPagePosted; } # EditTemplate allows a site administrator to pre-populate new pages # with the contents of another page. function EditTemplate($pagename, &$page, &$new) { global $EditTemplatesFmt; if (@$new['text'] > '') return; if (@$_REQUEST['template'] && PageExists($_REQUEST['template'])) { $p = RetrieveAuthPage($_REQUEST['template'], 'read', false, READPAGE_CURRENT); if ($p['text'] > '') $new['text'] = $p['text']; return; } foreach((array)$EditTemplatesFmt as $t) { $p = RetrieveAuthPage(FmtPageName($t,$pagename), 'read', false, READPAGE_CURRENT); if (@$p['text'] > '') { $new['text'] = $p['text']; return; } } } # RestorePage handles returning to the version of text as of # the version given by $restore or $_REQUEST['restore']. function RestorePage($pagename,&$page,&$new,$restore=NULL) { if (is_null($restore)) $restore=@$_REQUEST['restore']; if (!$restore) return; $t = $page['text']; $nl = (substr($t,-1)=="\n"); $t = explode("\n",$t); if ($nl) array_pop($t); krsort($page); reset($page); foreach($page as $k=>$v) { if ($k<$restore) break; if (strncmp($k, 'diff:', 5) != 0) continue; foreach(explode("\n",$v) as $x) { if (preg_match('/^(\\d+)(,(\\d+))?([adc])(\\d+)/',$x,$match)) { $a1 = $a2 = $match[1]; if ($match[3]) $a2=$match[3]; $b1 = $match[5]; if ($match[4]=='d') array_splice($t,$b1,$a2-$a1+1); if ($match[4]=='c') array_splice($t,$b1-1,$a2-$a1+1); continue; } if (strncmp($x,'< ',2) == 0) { $nlflag=true; continue; } if (preg_match('/^> (.*)$/',$x,$match)) { $nlflag=false; array_splice($t,$b1-1,0,$match[1]); $b1++; } if ($x=='\\ No newline at end of file') $nl=$nlflag; } } if ($nl) $t[]=''; $new['text']=implode("\n",$t); $new['=preview'] = $new['text']; PCache($pagename, $new); return $new['text']; } ## ReplaceOnSave performs text replacements on the text being posted. ## Patterns held in $ROEPatterns are replaced on every edit request, ## patterns held in $ROSPatterns are replaced only when the page ## is being posted (as signaled by $EnablePost). function ReplaceOnSave($pagename,&$page,&$new) { global $EnablePost, $ROSPatterns, $ROEPatterns; $new['text'] = PPRA((array)@$ROEPatterns, $new['text']); if ($EnablePost) { $new['text'] = PPRA((array)@$ROSPatterns, $new['text']); } $new['=preview'] = $new['text']; PCache($pagename, $new); } function SaveAttributes($pagename,&$page,&$new) { global $EnablePost, $LinkTargets, $SaveAttrPatterns, $PCache, $SaveProperties; if (!$EnablePost) return; $text = PPRA($SaveAttrPatterns, $new['text']); $LinkTargets = array(); $html = MarkupToHTML($pagename,$text); $new['targets'] = implode(',',array_keys((array)$LinkTargets)); $p = & $PCache[$pagename]; foreach((array)$SaveProperties as $k) { if (@$p["=p_$k"]) $new[$k] = $p["=p_$k"]; else unset($new[$k]); } unset($new['excerpt']); } function PostPage($pagename, &$page, &$new) { global $DiffKeepDays, $DiffFunction, $DeleteKeyPattern, $EnablePost, $Now, $Charset, $Author, $WikiDir, $IsPagePosted, $DiffKeepNum; SDV($DiffKeepDays,3650); SDV($DiffKeepNum,20); SDV($DeleteKeyPattern,"^\\s*delete\\s*$"); $IsPagePosted = false; if ($EnablePost) { $new['charset'] = $Charset; # kept for now, may be needed if custom PageStore $new['author'] = @$Author; $new["author:$Now"] = @$Author; $new["host:$Now"] = $_SERVER['REMOTE_ADDR']; $diffclass = preg_replace('/\\W/','',@$_POST['diffclass']); if ($page['time']>0 && function_exists(@$DiffFunction)) $new["diff:$Now:{$page['time']}:$diffclass"] = $DiffFunction($new['text'],@$page['text']); $keepgmt = $Now-$DiffKeepDays * 86400; $keepnum = array(); $keys = array_keys($new); foreach($keys as $k) if (preg_match("/^\\w+:(\\d+)/",$k,$match)) { $keepnum[$match[1]] = 1; if(count($keepnum)>$DiffKeepNum && $match[1]<$keepgmt) unset($new[$k]); } if (preg_match("/$DeleteKeyPattern/",$new['text'])){ if(@$new['passwdattr']>'' && !CondAuth($pagename, 'attr')) Abort('$[The page has an "attr" attribute and cannot be deleted.]'); else $WikiDir->delete($pagename); } else WritePage($pagename,$new); $IsPagePosted = true; } } function PostRecentChanges($pagename,$page,$new,$Fmt=null) { global $IsPagePosted, $RecentChangesFmt, $RCDelimPattern, $RCLinesMax; if (!$IsPagePosted && $Fmt==null) return; if ($Fmt==null) $Fmt = $RecentChangesFmt; foreach($Fmt as $rcfmt=>$pgfmt) { $rcname = FmtPageName($rcfmt,$pagename); if (!$rcname) continue; $pgtext = FmtPageName($pgfmt,$pagename); if (!$pgtext) continue; if (@$seen[$rcname]++) continue; $rcpage = ReadPage($rcname); $rcelim = preg_quote(preg_replace("/$RCDelimPattern.*$/",' ',$pgtext),'/'); $rcpage['text'] = preg_replace("/^.*$rcelim.*\n/m", '', @$rcpage['text']); if (!preg_match("/$RCDelimPattern/",$rcpage['text'])) $rcpage['text'] .= "$pgtext\n"; else $rcpage['text'] = preg_replace("/([^\n]*$RCDelimPattern.*\n)/", str_replace("$", "\\$", $pgtext) . "\n$1", $rcpage['text'], 1); if (@$RCLinesMax > 0) $rcpage['text'] = implode("\n", array_slice( explode("\n", $rcpage['text'], $RCLinesMax + 1), 0, $RCLinesMax)); WritePage($rcname, $rcpage); } } function AutoCreateTargets($pagename, &$page, &$new) { global $IsPagePosted, $AutoCreate, $LinkTargets; if (!$IsPagePosted) return; foreach((array)@$AutoCreate as $pat => $init) { if (is_null($init)) continue; foreach(preg_grep($pat, array_keys((array)@$LinkTargets)) as $aname) { if (PageExists($aname)) continue; $x = RetrieveAuthPage($aname, 'edit', false, READPAGE_CURRENT); if (!$x) continue; WritePage($aname, $init); } } } function PreviewPage($pagename,&$page,&$new) { global $IsPageSaved, $FmtV; if (@$_REQUEST['preview']) { $text = '(:groupheader:)'.$new['text'].'(:groupfooter:)'; $FmtV['$PreviewText'] = MarkupToHTML($pagename,$text); } } function HandleEdit($pagename, $auth = 'edit') { global $IsPagePosted, $EditFields, $ChangeSummary, $EditFunctions, $EnablePost, $FmtV, $Now, $EditRedirectFmt, $PageEditForm, $HandleEditFmt, $PageStartFmt, $PageEditFmt, $PageEndFmt; SDV($EditRedirectFmt, '$FullName'); if (@$_POST['cancel']) { Redirect(FmtPageName($EditRedirectFmt, $pagename)); return; } Lock(2); $page = RetrieveAuthPage($pagename, $auth, true); if (!$page) Abort("?cannot edit $pagename"); $new = $page; foreach((array)$EditFields as $k) if (isset($_POST[$k])) $new[$k]=str_replace("\r",'',stripmagic($_POST[$k])); $new['csum'] = $ChangeSummary; if ($ChangeSummary) $new["csum:$Now"] = $ChangeSummary; $EnablePost &= preg_grep('/^post/', array_keys(@$_POST)); $new['=preview'] = $new['text']; PCache($pagename, $new); UpdatePage($pagename, $page, $new); Lock(0); if ($IsPagePosted && !@$_POST['postedit']) { Redirect(FmtPageName($EditRedirectFmt, $pagename)); return; } $FmtV['$DiffClassMinor'] = (@$_POST['diffclass']=='minor') ? "checked='checked'" : ''; $FmtV['$EditText'] = str_replace('$','$',PHSC(@$new['text'],ENT_NOQUOTES)); $FmtV['$EditBaseTime'] = $Now; if (@$PageEditForm) { $efpage = FmtPageName($PageEditForm, $pagename); $form = RetrieveAuthPage($efpage, 'read', false, READPAGE_CURRENT); if (!$form || !@$form['text']) Abort("?unable to retrieve edit form $efpage", 'editform'); $FmtV['$EditForm'] = MarkupToHTML($pagename, $form['text']); } SDV($PageEditFmt, "$[Editing {\$FullName}]
", &$PageEndFmt)); PrintFmt($pagename,$AuthPromptFmt); exit; } function IsAuthorized($chal, $source, &$from) { global $AuthList, $AuthPw, $AllowPassword; if (!$chal) return $from; $auth = 0; $passwd = array(); foreach((array)$chal as $c) { $x = ''; $pwchal = preg_split('/([, ]|\\w+:)/', $c, -1, PREG_SPLIT_DELIM_CAPTURE); foreach($pwchal as $pw) { if ($pw == ',' || $pw == '') continue; else if ($pw == ' ') { $x = ''; continue; } else if (substr($pw, -1, 1) == ':') { $x = $pw; continue; } else if ($pw{0} != '@' && $x > '') $pw = $x . $pw; if (!$pw) continue; $passwd[] = $pw; if ($auth < 0) continue; if ($x || $pw{0} == '@') { if (@$AuthList[$pw]) $auth = $AuthList[$pw]; continue; } if (crypt($AllowPassword, $pw) == $pw) # nopass { $auth=1; continue; } foreach((array)$AuthPw as $pwresp) # password if (crypt($pwresp, $pw) == $pw) { $auth=1; continue; } } } if (!$passwd) return $from; if ($auth < 0) $auth = 0; return array($auth, $passwd, $source); } ## SessionAuth works with PmWikiAuth to manage authorizations ## as stored in sessions. First, it can be used to set session ## variables by calling it with an $auth argument. It then ## uses the authid, authpw, and authlist session variables ## to set the corresponding values of $AuthId, $AuthPw, and $AuthList ## as needed. function SessionAuth($pagename, $auth = NULL) { global $AuthId, $AuthList, $AuthPw, $SessionEncode, $SessionDecode, $EnableSessionPasswords; static $called; @$called++; $sn = session_name(); # in PHP5.3, $_REQUEST doesn't contain $_COOKIE if (!$auth && ($called > 1 || (!@$_REQUEST[$sn] && !@$_COOKIE[$sn]))) return; $sid = session_id(); @session_start(); foreach((array)$auth as $k => $v) { if ($k == 'authpw') { foreach((array)$v as $pw => $pv) { if ($SessionEncode) $pw = $SessionEncode($pw); $_SESSION[$k][$pw] = $pv; } } else if ($k) $_SESSION[$k] = (array)$v + (array)@$_SESSION[$k]; } if (!isset($AuthId)) $AuthId = @end($_SESSION['authid']); $AuthPw = array_map($SessionDecode, array_keys((array)@$_SESSION['authpw'])); if (!IsEnabled($EnableSessionPasswords, 1)) $_SESSION['authpw'] = array(); $AuthList = array_merge($AuthList, (array)@$_SESSION['authlist']); if (!$sid) @session_write_close(); } function PasswdVar($pagename, $level) { global $PCache, $PasswdVarAuth, $FmtV; $page = $PCache[$pagename]; if (!isset($page['=passwd'][$level])) { $page = RetrieveAuthPage($pagename, 'ALWAYS', false, READPAGE_CURRENT); if ($page) PCache($pagename, $page); } SDV($PasswdVarAuth, 'attr'); if ($PasswdVarAuth && !@$page['=auth'][$PasswdVarAuth]) return XL('(protected)'); $pwsource = $page['=pwsource'][$level]; if (strncmp($pwsource, 'cascade:', 8) == 0) { $FmtV['$PWCascade'] = substr($pwsource, 8); return FmtPageName('$[(using $PWCascade password)]', $pagename); } $setting = PHSC(implode(' ', preg_replace('/^(?!@|\\w+:).+$/', '****', (array)$page['=passwd'][$level]))); if ($pwsource == 'group' || $pwsource == 'site') { $FmtV['$PWSource'] = $pwsource; $setting = FmtPageName('$[(set by $PWSource)] ', $pagename) . PHSC($setting); } return $setting; } function PrintAttrForm($pagename) { global $PageAttributes, $PCache, $FmtV; echo FmtPageName("", $pagename); } function HandleAttr($pagename, $auth = 'attr') { global $HandleAttrFmt,$PageAttrFmt,$PageStartFmt,$PageEndFmt; $page = RetrieveAuthPage($pagename, $auth, true, READPAGE_CURRENT); if (!$page) { Abort("?unable to read $pagename"); } PCache($pagename,$page); XLSDV('en', array('EnterAttributes' => "Enter new attributes for this page below. Leaving a field blank will leave the attribute unchanged. To clear an attribute, enter 'clear'.")); SDV($PageAttrFmt,"$[{\$FullName} Attributes]
$[EnterAttributes]