auth.php

   1 <?php\r
   2 /////////////////////////////////////////////////\r
   3 // PukiWiki - Yet another WikiWikiWeb clone.\r
   4 //\r
   5 // $Id: auth.php,v 1.1 2003/07/14 03:56:32 arino Exp $\r
   6 //\r
   7 \r
   8 // ÊÔ½¸ÉÔ²ÄÇ½¤Ê¥Ú¡¼¥¸¤òÊÔ½¸¤·¤è¤¦¤È¤·¤¿¤È¤\r
   9 function check_editable($page,$auth_flag=TRUE,$exit_flag=TRUE)\r
  10 {\r
  11         global $script,$_title_cannotedit,$_msg_unfreeze;\r
  12         \r
  13         if (edit_auth($page,$auth_flag,$exit_flag) and is_editable($page))\r
  14         {\r
  15                 return TRUE;\r
  16         }\r
  17         if (!$exit_flag)\r
  18         {\r
  19                 return FALSE;\r
  20         }\r
  21         $body = $title = str_replace('$1',htmlspecialchars(strip_bracket($page)),$_title_cannotedit);\r
  22         if (is_freeze($page))\r
  23         {\r
  24                 $body .= "(<a href=\"$script?cmd=unfreeze&amp;page=".\r
  25                         rawurlencode($page)."\">$_msg_unfreeze</a>)";\r
  26         }\r
  27         \r
  28         $page = str_replace('$1',make_search($page),$_title_cannotedit);\r
  29         \r
  30         catbody($title,$page,$body);\r
  31         exit;\r
  32 }\r
  33 \r
  34 // ±ÜÍ÷ÉÔ²ÄÇ½¤Ê¥Ú¡¼¥¸¤ò±ÜÍ÷¤·¤è¤¦¤È¤·¤¿¤È¤ (¡©)\r
  35 function check_readable($page,$auth_flag=TRUE,$exit_flag=TRUE)\r
  36 {\r
  37         return read_auth($page,$auth_flag,$exit_flag);\r
  38 }\r
  39 \r
  40 // ÊÔ½¸Ç§¾Ú\r
  41 function edit_auth($page,$auth_flag=TRUE,$exit_flag=TRUE)\r
  42 {\r
  43         global $edit_auth,$edit_auth_pages,$_title_cannotedit;\r
  44         \r
  45         // ÊÔ½¸Ç§¾Ú¥Õ¥é¥°¤ò¥Á¥§¥Ã¥¯\r
  46         return $edit_auth ?\r
  47                 basic_auth($page,$auth_flag,$exit_flag,$edit_auth_pages,$_title_cannotedit) : TRUE;\r
  48 }\r
  49 \r
  50 // ±ÜÍ÷Ç§¾Ú\r
  51 function read_auth($page,$auth_flag=TRUE,$exit_flag=TRUE)\r
  52 {\r
  53         global $read_auth,$read_auth_pages,$_title_cannotread;\r
  54         \r
  55         // ±ÜÍ÷Ç§¾Ú¥Õ¥é¥°¤ò¥Á¥§¥Ã¥¯\r
  56         return $read_auth ?\r
  57                 basic_auth($page,$auth_flag,$exit_flag,$read_auth_pages,$_title_cannotread) : TRUE;\r
  58 }\r
  59 \r
  60 // BasicÇ§¾Ú\r
  61 function basic_auth($page,$auth_flag,$exit_flag,$auth_pages,$title_cannot)\r
  62 {\r
  63         global $auth_users,$auth_method_type;\r
  64         global $_msg_auth;\r
  65         \r
  66         // Ç§¾ÚÍ×ÈÝÈ½ÃÇÂÐ¾ÝÊ¸»úÎó¤ò¼èÆÀ¤¹¤ë\r
  67         $target_str = '';\r
  68         // ¥Ú¡¼¥¸Ì¾¤Ç¥Á¥§¥Ã¥¯¤¹¤ë¾ì¹ç\r
  69         if ($auth_method_type == 'pagename')\r
  70         {\r
  71                 $target_str = $page;\r
  72         }\r
  73         // ¥Ú¡¼¥¸Æâ¤ÎÊ¸»úÎó¤Ç¥Á¥§¥Ã¥¯¤¹¤ë¾ì¹ç\r
  74         else if ($auth_method_type == 'contents')\r
  75         {\r
  76                 $target_str = join('',get_source($page));\r
  77         }\r
  78         // ¹çÃ×¤·¤¿¥Ñ¥¿¡¼¥ó¤ÇÄêµÁ¤µ¤ì¤¿¥æ¡¼¥¶¤Î¥ê¥¹¥È\r
  79         $user_list = array();\r
  80         foreach($auth_pages as $key=>$val)\r
  81         {\r
  82                 if (preg_match($key,$target_str))\r
  83                 {\r
  84                         $user_list = array_merge($user_list,explode(',',$val));\r
  85                 }\r
  86         }\r
  87         if (count($user_list) == 0)\r
  88         {\r
  89                 // À©¸Â¤Ê¤·\r
  90                 return TRUE;\r
  91         }\r
  92         \r
  93         // ¥æ¡¼¥¶¥ê¥¹¥È¤Ë´Þ¤Þ¤ì¤ë¤¤¤º¤ì¤«¤Î¥æ¡¼¥¶¤ÈÇ§¾Ú¤µ¤ì¤ì¤ÐOK\r
  94         if (!isset($_SERVER['PHP_AUTH_USER'])\r
  95                 or !in_array($_SERVER['PHP_AUTH_USER'],$user_list)\r
  96                 or !array_key_exists($_SERVER['PHP_AUTH_USER'],$auth_users)\r
  97                 or $auth_users[$_SERVER['PHP_AUTH_USER']] != $_SERVER['PHP_AUTH_PW'])\r
  98         {\r
  99                 if ($auth_flag)\r
 100                 {\r
 101                         header('WWW-Authenticate: Basic realm="'.$_msg_auth.'"');\r
 102                         header('HTTP/1.0 401 Unauthorized');\r
 103                 }\r
 104                 if ($exit_flag)\r
 105                 {\r
 106                         $body = $title = str_replace('$1',htmlspecialchars(strip_bracket($page)),$title_cannot);\r
 107                         $page = str_replace('$1',make_search($page),$title_cannot);\r
 108                         catbody($title,$page,$body);\r
 109                         exit;\r
 110                 }\r
 111                 return FALSE;\r
 112         }\r
 113         return TRUE;\r
 114 }\r
 115 ?>\r