2 /////////////////////////////////////////////////
3 // PukiWiki - Yet another WikiWikiWeb clone.
5 // $Id: func.php,v 1.19 2004/12/16 13:09:48 henoheno Exp $
8 // ʸ»úÎó¤¬InterWikiName¤«¤É¤¦¤«
9 function is_interwiki($str)
11 global $InterWikiName;
13 return preg_match("/^$InterWikiName$/", $str);
16 // ʸ»úÎ󤬥ڡ¼¥¸Ì¾¤«¤É¤¦¤«
17 function is_pagename($str)
21 $is_pagename = (! is_interwiki($str) &&
22 preg_match("/^(?!\/)$BracketName$(?<!\/$)/", $str) &&
23 ! preg_match('/(^|\/)\.{1,2}(\/|$)/', $str));
26 if (defined('SOURCE_ENCODING')) {
27 switch(SOURCE_ENCODING){
29 $pattern = '/^(?:[\x00-\x7F]|(?:[\xC0-\xDF][\x80-\xBF])|(?:[\xE0-\xEF][\x80-\xBF][\x80-\xBF]))+$/';
32 $pattern = '/^(?:[\x00-\x7F]|(?:[\x8E\xA1-\xFE][\xA1-\xFE])|(?:\x8F[\xA1-\xFE][\xA1-\xFE]))+$/';
36 if($pattern !== '') $is_pagename = ($is_pagename && preg_match($pattern, $str));
41 // ʸ»úÎó¤¬URL¤«¤É¤¦¤«
42 function is_url($str, $only_http = FALSE)
44 $scheme = $only_http ? 'https?' : 'https?|ftp|news';
45 return preg_match('/^(' . $scheme . ')(:\/\/[-_.!~*\'()a-zA-Z0-9;\/?:\@&=+\$,%#]*)$/', $str);
49 function is_page($page, $reload = FALSE)
51 if ($reload) clearstatcache();
52 return file_exists(get_filename($page));
56 function is_editable($page)
59 static $is_editable = array();
61 if (! isset($is_editable[$page])) {
62 $is_editable[$page] = (
65 ! in_array($page, $cantedit)
69 return $is_editable[$page];
72 // ¥Ú¡¼¥¸¤¬Åà·ë¤µ¤ì¤Æ¤¤¤ë¤«
73 function is_freeze($page, $force = FALSE)
75 global $function_freeze;
76 static $is_freeze = array();
78 if ($force === TRUE) $is_freeze = array();
80 if (isset($is_freeze[$page])) return $is_freeze[$page];
81 if (! $function_freeze || ! is_page($page)) {
82 $is_freeze[$page] = FALSE;
86 list($lines) = get_source($page);
87 $is_freeze[$page] = (rtrim($lines) == '#freeze');
89 return $is_freeze[$page];
93 function auto_template($page)
95 global $auto_template_func, $auto_template_rules;
97 if (! $auto_template_func) return '';
101 foreach ($auto_template_rules as $rule => $template) {
103 if (! preg_match("/$rule/", $page, $matches)) continue;
105 $template_page = preg_replace("/$rule/", $template, $page);
106 if (! is_page($template_page)) continue;
108 $body = join('', get_source($template_page));
110 // ¸«½Ð¤·¤Î¸ÇÍIDÉô¤òºï½ü
111 $body = preg_replace('/^(\*{1,3}.*)\[#[A-Za-z][\w-]+\](.*)$/m', '$1$2', $body);
114 $body = preg_replace('/^#freeze\s*$/m', '', $body);
116 $count = count($matches);
117 for ($i = 0; $i < $count; $i++)
118 $body = str_replace("\$$i", $matches[$i], $body);
126 function get_search_words($words, $special = FALSE)
129 // Perl¥á¥â - Àµ¤·¤¯¥Ñ¥¿¡¼¥ó¥Þ¥Ã¥Á¤µ¤»¤ë
130 // http://www.din.or.jp/~ohzaki/perl.htm#JP_Match
131 $eucpre = $eucpost = '';
132 if (SOURCE_ENCODING == 'EUC-JP') {
133 $eucpre = '(?<!\x8F)';
134 // # JIS X 0208 ¤¬ 0ʸ»ú°Ê¾å³¤¤¤Æ # ASCII, SS2, SS3 ¤Þ¤¿¤Ï½ªÃ¼
135 $eucpost = '(?=(?:[\xA1-\xFE][\xA1-\xFE])*(?:[\x00-\x7F\x8E\x8F]|\z))';
137 $quote_func = create_function('$str', 'return preg_quote($str, "/");');
139 // LANG=='ja'¤Ç¡¢mb_convert_kana¤¬»È¤¨¤ë¾ì¹ç¤Ïmb_convert_kana¤ò»ÈÍÑ
140 $convert_kana = create_function('$str, $option',
141 (LANG == 'ja' && function_exists('mb_convert_kana')) ?
142 'return mb_convert_kana($str, $option);' : 'return $str;'
145 foreach ($words as $word) {
146 // ±Ñ¿ô»ú¤ÏȾ³Ñ,¥«¥¿¥«¥Ê¤ÏÁ´³Ñ,¤Ò¤é¤¬¤Ê¤Ï¥«¥¿¥«¥Ê¤Ë
147 $word_zk = $convert_kana($word, 'aKCV');
149 for ($pos = 0; $pos < mb_strlen($word_zk); $pos++) {
150 $char = mb_substr($word_zk, $pos, 1);
151 // $special : htmlspecialchars()¤òÄ̤¹¤«
152 $arr = array($quote_func($special ? htmlspecialchars($char) : $char));
153 if (strlen($char) == 1) {
155 foreach (array(strtoupper($char), strtolower($char)) as $_char) {
157 $arr[] = $quote_func($_char);
159 $arr[] = sprintf('&#(?:%d|x%x);', $ord, $ord); // ¼ÂÂλ²¾È
160 $arr[] = $quote_func($convert_kana($_char, 'A')); // Á´³Ñ
164 $arr[] = $quote_func($convert_kana($char, 'c')); // ¤Ò¤é¤¬¤Ê
165 $arr[] = $quote_func($convert_kana($char, 'k')); // Ⱦ³Ñ¥«¥¿¥«¥Ê
167 $chars[] = '(?:' . join('|', array_unique($arr)) . ')';
169 $retval[$word] = $eucpre.join('', $chars) . $eucpost;
175 function do_search($word, $type = 'AND', $non_format = FALSE)
177 global $script, $whatsnew, $non_list, $search_non_list;
178 global $_msg_andresult, $_msg_orresult, $_msg_notfoundresult;
183 $b_type = ($type == 'AND'); // AND:TRUE OR:FALSE
184 $keys = get_search_words(preg_split('/\s+/', $word, -1, PREG_SPLIT_NO_EMPTY));
186 $_pages = get_existpages();
189 foreach ($_pages as $page) {
190 if ($page == $whatsnew || (! $search_non_list && preg_match("/$non_list/", $page)))
193 // ¸¡º÷Âоݥڡ¼¥¸¤ÎÀ©¸Â¤ò¤«¤±¤ë¤«¤É¤¦¤« (¥Ú¡¼¥¸Ì¾¤ÏÀ©¸Â³°)
194 if ($search_auth && ! check_readable($page, false, false)) {
195 $source = get_source(); // ¸¡º÷Âоݥڡ¼¥¸ÆâÍƤò¶õ¤Ë¡£
197 $source = get_source($page);
200 array_unshift($source, $page); // ¥Ú¡¼¥¸Ì¾¤â¸¡º÷ÂоݤË
203 foreach ($keys as $key) {
204 $tmp = preg_grep("/$key/", $source);
205 $b_match = (! empty($tmp));
206 if ($b_match xor $b_type) break;
208 if ($b_match) $pages[$page] = get_filetime($page);
210 if ($non_format) return array_keys($pages);
212 $r_word = rawurlencode($word);
213 $s_word = htmlspecialchars($word);
215 return str_replace('$1', $s_word, $_msg_notfoundresult);
219 foreach ($pages as $page=>$time) {
220 $r_page = rawurlencode($page);
221 $s_page = htmlspecialchars($page);
222 $passage = get_passage($time);
223 $retval .= ' <li><a href="' . $script . '?cmd=read&page=' .
224 $r_page . '&word=' . $r_word . '">' . $s_page .
225 '</a>' . $passage . '</li>' . "\n";
227 $retval .= '</ul>' . "\n";
229 $retval .= str_replace('$1', $s_word, str_replace('$2', count($pages),
230 str_replace('$3', count($_pages), $b_type ? $_msg_andresult : $_msg_orresult)));
235 // ¥×¥í¥°¥é¥à¤Ø¤Î°ú¿ô¤Î¥Á¥§¥Ã¥¯
236 function arg_check($str)
239 return isset($vars['cmd']) && (strpos($vars['cmd'], $str) === 0);
242 // ¥Ú¡¼¥¸Ì¾¤Î¥¨¥ó¥³¡¼¥É
243 function encode($key)
245 return ($key == '') ? '' : strtoupper(join('', unpack('H*0', $key)));
248 // ¥Ú¡¼¥¸Ì¾¤Î¥Ç¥³¡¼¥É
249 function decode($key)
251 return ($key == '') ? '' : substr(pack('H*', '20202020' . $key), 4);
255 function strip_bracket($str)
258 if (preg_match('/^\[\[(.*)\]\]$/', $str, $match)) {
266 function page_list($pages, $cmd = 'read', $withfilename = FALSE)
268 global $script, $list_index;
269 global $_msg_symbol, $_msg_other;
270 global $pagereading_enable;
272 // ¥½¡¼¥È¥¡¼¤ò·èÄꤹ¤ë¡£ ' ' < '[a-zA-Z]' < 'zz'¤È¤¤¤¦Á°Äó¡£
278 if($pagereading_enable) {
279 mb_regex_encoding(SOURCE_ENCODING);
280 $readings = get_readings($pages);
283 $list = $matches = array();
284 foreach($pages as $file=>$page) {
285 $r_page = rawurlencode($page);
286 $s_page = htmlspecialchars($page, ENT_QUOTES);
287 $passage = get_pg_passage($page);
289 $str = ' <li><a href="' .
290 $script . '?cmd=' . $cmd . '&page=' . $r_page .
291 '">' . $s_page . '</a>' . $passage;
294 $s_file = htmlspecialchars($file);
295 $str .= "\n" . ' <ul><li>' . $s_file . '</li></ul>' .
300 // WARNING: Japanese code hard-wired
301 if($pagereading_enable) {
302 if(mb_ereg('^([A-Za-z])', mb_convert_kana($page, 'a'), $matches)) {
304 } elseif(mb_ereg('^([¥¡-¥ö])', $readings[$page], $matches)) { // here
306 } elseif (mb_ereg('^[ -~]|[^¤¡-¤ó°¡-ô¦]', $page)) { // and here
312 $head = (preg_match('/^([A-Za-z])/', $page, $matches)) ? $matches[1] :
313 (preg_match('/^([ -~])/', $page, $matches) ? $symbol : $other);
316 $list[$head][$page] = $str;
321 $arr_index = array();
322 $retval .= '<ul>' . "\n";
323 foreach ($list as $head=>$pages) {
324 if ($head === $symbol) {
325 $head = $_msg_symbol;
326 } else if ($head === $other) {
332 $arr_index[] = '<a id="top_' . $cnt .
333 '" href="#head_' . $cnt . '"><strong>' .
334 $head . '</strong></a>';
335 $retval .= ' <li><a id="head_' . $cnt . '" href="#top_' . $cnt .
336 '"><strong>' . $head . '</strong></a>' . "\n" .
340 $retval .= join("\n", $pages);
342 $retval .= "\n </ul>\n </li>\n";
344 $retval .= '</ul>' . "\n";
345 if ($list_index && $cnt > 0) {
347 while (! empty($arr_index))
348 $top[] = join(' | ' . "\n", array_splice($arr_index, 0, 16)) . "\n";
350 $retval = '<div id="top" style="text-align:center">' . "\n" .
351 join('<br />', $top) . '</div>' . "\n" . $retval;
356 // Show text formatting rules
361 if (! is_page($rule_page)) {
362 return '<p>Sorry, page \'' . htmlspecialchars($rule_page) .
363 '\' unavailable.</p>';
365 return convert_html(get_source($rule_page));
369 // Show (critical) error message
370 function die_message($msg)
372 $title = $page = 'Runtime error';
375 <h3>Runtime error</h3>
376 <strong>Error message : $msg</strong>
379 if(defined('SKIN_FILE') && file_exists(SKIN_FILE) && is_readable(SKIN_FILE)) {
380 catbody($title, $page, $body);
383 header('Content-Type: text/html; charset=euc-jp');
385 <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
388 <title>$title</title>
389 <meta http-equiv="content-type" content="text/html; charset=euc-jp">
400 // ¸½ºß»þ¹ï¤ò¥Þ¥¤¥¯¥íÉäǼèÆÀ
401 function getmicrotime()
403 list($usec, $sec) = explode(' ', microtime());
404 return ((float)$sec + (float)$usec);
408 function get_date($format, $timestamp = NULL)
410 $format = preg_replace('/(?<!\\\)T/',
411 preg_replace('/(.)/', '\\\$1', ZONE), $format);
413 $time = ZONETIME + (($timestamp !== NULL) ? $timestamp : UTIME);
415 return date($format, $time);
419 function format_date($val, $paren = FALSE)
421 global $date_format, $time_format, $weeklabels;
425 $date = date($date_format . ' ' . $time_format, $val) .
426 ' ' . '(' . $weeklabels[date('w', $val)] . ')';
428 return $paren ? '(' . $date . ')' : $date;
431 // ·Ð²á»þ¹ïʸ»úÎó¤òºî¤ë
432 function get_passage($time, $paren = TRUE)
434 static $units = array('m'=>60, 'h'=>24, 'd'=>1);
436 $time = max(0, (UTIME - $time) / 60); // minutes
438 foreach ($units as $unit=>$card) {
439 if ($time < $card) break;
442 $time = floor($time) . $unit;
444 return $paren ? '(' . $time . ')' : $time;
447 // Hide <input type="(submit|button|image)"...>
448 function drop_submit($str)
450 return preg_replace('/<input([^>]+)type="(submit|button|image)"/i',
451 '<input$1type="hidden"', $str);
454 // AutoLink¤Î¥Ñ¥¿¡¼¥ó¤òÀ¸À®¤¹¤ë
456 function get_autolink_pattern(& $pages)
458 global $WikiName, $autolink, $nowikiname;
460 $config = &new Config('AutoLink');
462 $ignorepages = $config->get('IgnoreList');
463 $forceignorepages = $config->get('ForceIgnoreList');
465 $auto_pages = array_merge($ignorepages, $forceignorepages);
467 foreach ($pages as $page) {
468 if (preg_match("/^$WikiName$/", $page) ?
469 $nowikiname : strlen($page) >= $autolink)
470 $auto_pages[] = $page;
473 if (empty($auto_pages))
474 return $nowikiname ? '(?!)' : $WikiName;
476 $auto_pages = array_unique($auto_pages);
477 sort($auto_pages, SORT_STRING);
479 $auto_pages_a = array_values(preg_grep('/^[A-Z]+$/i', $auto_pages));
480 $auto_pages = array_values(array_diff($auto_pages, $auto_pages_a));
482 $result = get_autolink_pattern_sub($auto_pages, 0, count($auto_pages), 0);
483 $result_a = get_autolink_pattern_sub($auto_pages_a, 0, count($auto_pages_a), 0);
485 return array($result, $result_a, $forceignorepages);
488 function get_autolink_pattern_sub(& $pages, $start, $end, $pos)
490 if ($end == 0) return '(?!)';
493 $count = $i = $j = 0;
494 $x = (mb_strlen($pages[$start]) <= $pos);
497 for ($i = $start; $i < $end; $i = $j)
499 $char = mb_substr($pages[$i], $pos, 1);
500 for ($j = $i; $j < $end; $j++) {
501 if (mb_substr($pages[$j], $pos, 1) != $char) break;
503 if ($i != $start) $result .= '|';
504 if ($i >= ($j - 1)) {
505 $result .= str_replace(' ', '\\ ', preg_quote(mb_substr($pages[$i], $pos), '/'));
507 $result .= str_replace(' ', '\\ ', preg_quote($char, '/')) .
508 get_autolink_pattern_sub($pages, $i, $j, $pos + 1);
512 if ($x || $count > 1) $result = '(?:' . $result . ')';
513 if ($x) $result .= '?';
518 // pukiwiki.php¥¹¥¯¥ê¥×¥È¤Îabsolute-uri¤òÀ¸À®
519 function get_script_uri($init_uri = '')
521 global $script_directory_index;
524 if ($init_uri == '') {
526 if (isset($script)) return $script;
529 $msg = 'get_script_uri() failed: Please set $script at INI_FILE manually';
531 $script = (SERVER_PORT == 443 ? 'https://' : 'http://'); // scheme
532 $script .= SERVER_NAME; // host
533 $script .= (SERVER_PORT == 80 ? '' : ':' . SERVER_PORT); // port
535 // SCRIPT_NAME ¤¬'/'¤Ç»Ï¤Þ¤Ã¤Æ¤¤¤Ê¤¤¾ì¹ç(cgi¤Ê¤É) REQUEST_URI¤ò»È¤Ã¤Æ¤ß¤ë
537 if ($path{0} != '/') {
538 if (! isset($_SERVER['REQUEST_URI']) || $_SERVER['REQUEST_URI']{0} != '/')
541 // REQUEST_URI¤ò¥Ñ¡¼¥¹¤·¡¢pathÉôʬ¤À¤±¤ò¼è¤ê½Ð¤¹
542 $parse_url = parse_url($script . $_SERVER['REQUEST_URI']);
543 if (! isset($parse_url['path']) || $parse_url['path']{0} != '/')
546 $path = $parse_url['path'];
550 if (! is_url($script, TRUE) && php_sapi_name() == 'cgi')
556 if (isset($script)) die_message('$script: Already init');
557 if (! is_url($init_uri, TRUE)) die_message('$script: Invalid URI');
561 // Cut filename or not
562 if (isset($script_directory_index)) {
563 if (! file_exists($script_directory_index))
564 die_message('Directory index file not found: ' .
565 htmlspecialchars($script_directory_index));
567 if (preg_match('#^(.+/)' . preg_quote($script_directory_index, '#') . '$#',
568 $script, $matches)) $script = $matches[1];
575 ÊÑ¿ôÆâ¤Înull(\0)¥Ð¥¤¥È¤òºï½ü¤¹¤ë
576 PHP¤Ïfopen("hoge.php\0.txt")¤Ç"hoge.php"¤ò³«¤¤¤Æ¤·¤Þ¤¦¤Ê¤É¤ÎÌäÂꤢ¤ê
578 http://ns1.php.gr.jp/pipermail/php-users/2003-January/012742.html
579 [PHP-users 12736] null byte attack
581 2003-05-16: magic quotes gpc¤ÎÉü¸µ½èÍý¤òÅý¹ç
582 2003-05-21: Ï¢ÁÛÇÛÎó¤Î¥¡¼¤Ïbinary safe
584 function input_filter($param)
586 static $magic_quotes_gpc = NULL;
587 if ($magic_quotes_gpc === NULL)
588 $magic_quotes_gpc = get_magic_quotes_gpc();
590 if (is_array($param)) {
591 return array_map('input_filter', $param);
593 $result = str_replace("\0", '', $param);
594 if ($magic_quotes_gpc) $result = stripslashes($result);
599 // Compat for 3rd party plugins. Remove this later
600 function sanitize($param) {
601 return input_filter($param);
604 // CSV·Á¼°¤Îʸ»úÎó¤òÇÛÎó¤Ë
605 function csv_explode($separator, $string)
607 $retval = $matches = array();
609 $_separator = preg_quote($separator, '/');
610 if (! preg_match_all('/("[^"]*(?:""[^"]*)*"|[^' . $_separator . ']*)' .
611 $_separator . '/', $string . $separator, $matches))
614 foreach ($matches[1] as $str) {
616 if ($len > 1 && $str{0} == '"' && $str{$len - 1} == '"')
617 $str = str_replace('""', '"', substr($str, 1, -1));
623 // ÇÛÎó¤òCSV·Á¼°¤Îʸ»úÎó¤Ë
624 function csv_implode($glue, $pieces)
626 $_glue = ($glue != '') ? '\\' . $glue{0} : '';
628 foreach ($pieces as $str) {
629 if (ereg("[$_glue\"\n\r]", $str))
630 $str = '"' . str_replace('"', '""', $str) . '"';
633 return join($glue, $arr);
636 function pkwk_login($pass = '')
640 if ($pass != '' && md5($pass) == $adminpass) {
643 sleep(2); // Blocking brute force attack
651 // is_a -- Returns TRUE if the object is of this class or has this class as one of its parents
653 if (! function_exists('is_a'))
655 function is_a($class, $match)
657 if (empty($class)) return FALSE;
659 $class = is_object($class) ? get_class($class) : $class;
660 if (strtolower($class) == strtolower($match)) {
663 return is_a(get_parent_class($class), $match); // Recurse
668 // array_fill -- Fill an array with values
670 if (! function_exists('array_fill'))
672 function array_fill($start_index, $num, $value)
675 while ($num-- > 0) $ret[$start_index++] = $value;
680 // md5_file -- Calculates the md5 hash of a given filename
682 if (! function_exists('md5_file'))
684 function md5_file($filename)
686 if (! file_exists($filename)) return FALSE;
688 $fd = fopen($filename, 'rb');
689 if ($fd === FALSE ) return FALSE;
690 $data = fread($fd, filesize($filename));