2 // PukiWiki - Yet another WikiWikiWeb clone.
3 // $Id: init.php,v 1.46 2006/06/11 15:04:27 henoheno Exp $
5 // 2002-2006 PukiWiki Developers Team
6 // 2001-2002 Originally written by yu-ji
7 // License: GPL v2 or (at your option) any later version
11 // PukiWiki version / Copyright / Licence
13 define('S_VERSION', '1.4.7');
15 '<strong>PukiWiki ' . S_VERSION . '</strong>' .
16 ' Copyright © 2001-2006' .
17 ' <a href="http://pukiwiki.sourceforge.jp/">PukiWiki Developers Team</a>.' .
18 ' License is <a href="http://www.gnu.org/licenses/gpl.html">GPL</a>.<br />' .
19 ' Based on "PukiWiki" 1.3 by <a href="http://factage.com/yu-ji/">yu-ji</a>'
22 /////////////////////////////////////////////////
23 // Init server variables
25 foreach (array('SCRIPT_NAME', 'SERVER_ADMIN', 'SERVER_NAME',
26 'SERVER_PORT', 'SERVER_SOFTWARE') as $key) {
27 define($key, isset($_SERVER[$key]) ? $_SERVER[$key] : '');
28 unset(${$key}, $_SERVER[$key], $HTTP_SERVER_VARS[$key]);
31 /////////////////////////////////////////////////
32 // Init grobal variables
34 $foot_explain = array(); // Footnotes
35 $related = array(); // Related pages
36 $head_tags = array(); // XHTML tags in <head></head>
38 /////////////////////////////////////////////////
41 define('LOCALZONE', date('Z'));
42 define('UTIME', time() - LOCALZONE);
43 define('MUTIME', getmicrotime());
45 /////////////////////////////////////////////////
48 define('INI_FILE', DATA_HOME . 'pukiwiki.ini.php');
50 if (! file_exists(INI_FILE) || ! is_readable(INI_FILE)) {
51 $die .= 'File is not found. (INI_FILE)' . "\n";
55 if ($die) die_message(nl2br("\n\n" . $die));
57 /////////////////////////////////////////////////
58 // INI_FILE: LANG ¤Ë´ð¤Å¤¯¥¨¥ó¥³¡¼¥Ç¥£¥ó¥°ÀßÄê
60 // MB_LANGUAGE: mb_language (for mbstring extension)
61 // 'uni'(means UTF-8), 'English', or 'Japanese'
62 // SOURCE_ENCODING: Internal content encoding (for mbstring extension)
63 // 'UTF-8', 'ASCII', or 'EUC-JP'
64 // CONTENT_CHARSET: Internal content encoding = Output content charset (for skin)
65 // 'UTF-8', 'iso-8859-1', 'EUC-JP' or ...
68 case 'en': define('MB_LANGUAGE', 'English' ); break;
69 case 'ja': define('MB_LANGUAGE', 'Japanese'); break;
70 //UTF-8:case 'ko': define('MB_LANGUAGE', 'Korean' ); break;
71 //UTF-8: // See BugTrack2/13 for all hack about Korean support,
72 //UTF-8: // and give us your report!
73 default: die_message('No such language "' . LANG . '"'); break;
76 //UTF-8:define('PKWK_UTF8_ENABLE', 1);
77 if (defined('PKWK_UTF8_ENABLE')) {
78 define('SOURCE_ENCODING', 'UTF-8');
79 define('CONTENT_CHARSET', 'UTF-8');
83 define('SOURCE_ENCODING', 'ASCII');
84 define('CONTENT_CHARSET', 'iso-8859-1');
87 define('SOURCE_ENCODING', 'EUC-JP');
88 define('CONTENT_CHARSET', 'EUC-JP');
93 mb_language(MB_LANGUAGE);
94 mb_internal_encoding(SOURCE_ENCODING);
95 ini_set('mbstring.http_input', 'pass');
96 mb_http_output('pass');
97 mb_detect_order('auto');
99 /////////////////////////////////////////////////
100 // INI_FILE: Require LANG_FILE
102 define('LANG_FILE_HINT', DATA_HOME . LANG . '.lng.php'); // For encoding hint
103 define('LANG_FILE', DATA_HOME . UI_LANG . '.lng.php'); // For UI resource
105 foreach (array('LANG_FILE_HINT', 'LANG_FILE') as $langfile) {
106 if (! file_exists(constant($langfile)) || ! is_readable(constant($langfile))) {
107 $die .= 'File is not found or not readable. (' . $langfile . ')' . "\n";
109 require_once(constant($langfile));
112 if ($die) die_message(nl2br("\n\n" . $die));
114 /////////////////////////////////////////////////
115 // LANG_FILE: Init encoding hint
117 define('PKWK_ENCODING_HINT', isset($_LANG['encode_hint'][LANG]) ? $_LANG['encode_hint'][LANG] : '');
118 unset($_LANG['encode_hint']);
120 /////////////////////////////////////////////////
121 // LANG_FILE: Init severn days of the week
123 $weeklabels = $_msg_week;
125 /////////////////////////////////////////////////
126 // INI_FILE: Init $script
128 if (isset($script)) {
129 get_script_uri($script); // Init manually
131 $script = get_script_uri(); // Init automatically
134 /////////////////////////////////////////////////
135 // INI_FILE: $agents: UserAgent¤Î¼±ÊÌ
137 $ua = 'HTTP_USER_AGENT';
138 $user_agent = $matches = array();
140 $user_agent['agent'] = isset($_SERVER['HTTP_USER_AGENT']) ? $_SERVER['HTTP_USER_AGENT'] : '';
141 unset(${$ua}, $_SERVER[$ua], $HTTP_SERVER_VARS[$ua], $ua); // safety
143 foreach ($agents as $agent) {
144 if (preg_match($agent['pattern'], $user_agent['agent'], $matches)) {
145 $user_agent['profile'] = isset($agent['profile']) ? $agent['profile'] : '';
146 $user_agent['name'] = isset($matches[1]) ? $matches[1] : ''; // device or browser name
147 $user_agent['vers'] = isset($matches[2]) ? $matches[2] : ''; // 's version
151 unset($agents, $matches);
153 // Profile-related init and setting
154 define('UA_PROFILE', isset($user_agent['profile']) ? $user_agent['profile'] : '');
156 define('UA_INI_FILE', DATA_HOME . UA_PROFILE . '.ini.php');
157 if (! file_exists(UA_INI_FILE) || ! is_readable(UA_INI_FILE)) {
158 die_message('UA_INI_FILE for "' . UA_PROFILE . '" not found.');
160 require(UA_INI_FILE); // Also manually
163 define('UA_NAME', isset($user_agent['name']) ? $user_agent['name'] : '');
164 define('UA_VERS', isset($user_agent['vers']) ? $user_agent['vers'] : '');
165 unset($user_agent); // Unset after reading UA_INI_FILE
167 /////////////////////////////////////////////////
168 // ¥Ç¥£¥ì¥¯¥È¥ê¤Î¥Á¥§¥Ã¥¯
171 foreach(array('DATA_DIR', 'DIFF_DIR', 'BACKUP_DIR', 'CACHE_DIR') as $dir){
172 if (! is_writable(constant($dir)))
173 $die .= 'Directory is not found or not writable (' . $dir . ')' . "\n";
176 // ÀßÄê¥Õ¥¡¥¤¥ë¤ÎÊÑ¿ô¥Á¥§¥Ã¥¯
178 foreach(array('rss_max', 'page_title', 'note_hr', 'related_link', 'show_passage',
179 'rule_related_str', 'load_template_func') as $var){
180 if (! isset(${$var})) $temp .= '$' . $var . "\n";
183 if ($die) $die .= "\n"; // A breath
184 $die .= 'Variable(s) not found: (Maybe the old *.ini.php?)' . "\n" . $temp;
188 foreach(array('LANG', 'PLUGIN_DIR') as $def){
189 if (! defined($def)) $temp .= $def . "\n";
192 if ($die) $die .= "\n"; // A breath
193 $die .= 'Define(s) not found: (Maybe the old *.ini.php?)' . "\n" . $temp;
196 if($die) die_message(nl2br("\n\n" . $die));
199 /////////////////////////////////////////////////
200 // ɬ¿Ü¤Î¥Ú¡¼¥¸¤¬Â¸ºß¤·¤Ê¤±¤ì¤Ð¡¢¶õ¤Î¥Õ¥¡¥¤¥ë¤òºîÀ®¤¹¤ë
202 foreach(array($defaultpage, $whatsnew, $interwiki) as $page){
203 if (! is_page($page)) touch(get_filename($page));
206 /////////////////////////////////////////////////
207 // ³°Éô¤«¤é¤¯¤ëÊÑ¿ô¤Î¥Á¥§¥Ã¥¯
209 // Prohibit $_GET attack
210 foreach (array('msg', 'pass') as $key) {
211 if (isset($_GET[$key])) die_message('Sorry, already reserved: ' . $key . '=');
215 unset($HTTP_GET_VARS, $HTTP_POST_VARS); //, 'SERVER', 'ENV', 'SESSION', ...
216 unset($_REQUEST); // Considered harmful
218 // Remove null character etc.
219 $_GET = input_filter($_GET);
220 $_POST = input_filter($_POST);
221 $_COOKIE = input_filter($_COOKIE);
223 // ʸ»ú¥³¡¼¥ÉÊÑ´¹ ($_POST)
224 // <form> ¤ÇÁ÷¿®¤µ¤ì¤¿Ê¸»ú (¥Ö¥é¥¦¥¶¤¬¥¨¥ó¥³¡¼¥É¤·¤¿¥Ç¡¼¥¿) ¤Î¥³¡¼¥É¤òÊÑ´¹
225 // POST method ¤Ï¾ï¤Ë form ·Ðͳ¤Ê¤Î¤Ç¡¢É¬¤ºÊÑ´¹¤¹¤ë
227 if (isset($_POST['encode_hint']) && $_POST['encode_hint'] != '') {
228 // do_plugin_xxx() ¤ÎÃæ¤Ç¡¢<form> ¤Ë encode_hint ¤ò»Å¹þ¤ó¤Ç¤¤¤ë¤Î¤Ç¡¢
229 // encode_hint ¤òÍѤ¤¤Æ¥³¡¼¥É¸¡½Ð¤¹¤ë¡£
230 // Á´ÂΤò¸«¤Æ¥³¡¼¥É¸¡½Ð¤¹¤ë¤È¡¢µ¡¼ï°Í¸ʸ»ú¤ä¡¢Ì¯¤Ê¥Ð¥¤¥Ê¥ê
231 // ¥³¡¼¥É¤¬º®Æþ¤·¤¿¾ì¹ç¤Ë¡¢¥³¡¼¥É¸¡½Ð¤Ë¼ºÇÔ¤¹¤ë¶²¤ì¤¬¤¢¤ë¡£
232 $encode = mb_detect_encoding($_POST['encode_hint']);
233 mb_convert_variables(SOURCE_ENCODING, $encode, $_POST);
235 } else if (isset($_POST['charset']) && $_POST['charset'] != '') {
236 // TrackBack Ping ¤Ç»ØÄꤵ¤ì¤Æ¤¤¤ë¤³¤È¤¬¤¢¤ë
237 // ¤¦¤Þ¤¯¤¤¤«¤Ê¤¤¾ì¹ç¤Ï¼«Æ°¸¡½Ð¤ËÀÚ¤êÂؤ¨
238 if (mb_convert_variables(SOURCE_ENCODING,
239 $_POST['charset'], $_POST) !== $_POST['charset']) {
240 mb_convert_variables(SOURCE_ENCODING, 'auto', $_POST);
243 } else if (! empty($_POST)) {
244 // Á´Éô¤Þ¤È¤á¤Æ¡¢¼«Æ°¸¡½Ð¡¿ÊÑ´¹
245 mb_convert_variables(SOURCE_ENCODING, 'auto', $_POST);
248 // ʸ»ú¥³¡¼¥ÉÊÑ´¹ ($_GET)
249 // GET method ¤Ï form ¤«¤é¤Î¾ì¹ç¤È¡¢<a href="http://script/?key=value> ¤Î¾ì¹ç¤¬¤¢¤ë
250 // <a href...> ¤Î¾ì¹ç¤Ï¡¢¥µ¡¼¥Ð¡¼¤¬ rawurlencode ¤·¤Æ¤¤¤ë¤Î¤Ç¡¢¥³¡¼¥ÉÊÑ´¹¤ÏÉÔÍ×
251 if (isset($_GET['encode_hint']) && $_GET['encode_hint'] != '')
253 // form ·Ðͳ¤Î¾ì¹ç¤Ï¡¢¥Ö¥é¥¦¥¶¤¬¥¨¥ó¥³¡¼¥É¤·¤Æ¤¤¤ë¤Î¤Ç¡¢¥³¡¼¥É¸¡½Ð¡¦ÊÑ´¹¤¬É¬Íס£
254 // encode_hint ¤¬´Þ¤Þ¤ì¤Æ¤¤¤ë¤Ï¤º¤Ê¤Î¤Ç¡¢¤½¤ì¤ò¸«¤Æ¡¢¥³¡¼¥É¸¡½Ð¤·¤¿¸å¡¢ÊÑ´¹¤¹¤ë¡£
255 // Íýͳ¤Ï¡¢post ¤ÈƱÍÍ
256 $encode = mb_detect_encoding($_GET['encode_hint']);
257 mb_convert_variables(SOURCE_ENCODING, $encode, $_GET);
261 /////////////////////////////////////////////////
262 // QUERY_STRING¤ò¼èÆÀ
264 // cmd¤âplugin¤â»ØÄꤵ¤ì¤Æ¤¤¤Ê¤¤¾ì¹ç¤Ï¡¢QUERY_STRING¤ò
265 // ¥Ú¡¼¥¸Ì¾¤«InterWikiName¤Ç¤¢¤ë¤È¤ß¤Ê¤¹
267 if (isset($_SERVER['QUERY_STRING']) && $_SERVER['QUERY_STRING']) {
268 $arg = & $_SERVER['QUERY_STRING'];
269 } else if (isset($_SERVER['argv']) && ! empty($_SERVER['argv'])) {
270 $arg = & $_SERVER['argv'][0];
272 if (PKWK_QUERY_STRING_MAX && strlen($arg) > PKWK_QUERY_STRING_MAX) {
273 // Something nasty attack?
274 pkwk_common_headers();
275 sleep(1); // Fake processing, and/or process other threads
276 echo('Query string too long');
279 $arg = input_filter($arg); // \0 ½üµî
281 // unset QUERY_STRINGs
282 foreach (array('QUERY_STRING', 'argv', 'argc') as $key) {
283 unset(${$key}, $_SERVER[$key], $HTTP_SERVER_VARS[$key]);
285 // $_SERVER['REQUEST_URI'] is used at func.php NOW
286 unset($REQUEST_URI, $HTTP_SERVER_VARS['REQUEST_URI']);
288 // mb_convert_variables¤Î¥Ð¥°(?)Âкö: ÇÛÎó¤ÇÅϤµ¤Ê¤¤¤ÈÍî¤Á¤ë
290 mb_convert_variables(SOURCE_ENCODING, 'auto', $arg);
293 /////////////////////////////////////////////////
294 // QUERY_STRING¤òʬ²ò¤·¤Æ¥³¡¼¥ÉÊÑ´¹¤·¡¢$_GET ¤Ë¾å½ñ¤
296 // URI ¤ò urlencode ¤»¤º¤ËÆþÎϤ·¤¿¾ì¹ç¤ËÂн褹¤ë
298 foreach (explode('&', $arg) as $key_and_value) {
299 if (preg_match('/^([^=]+)=(.+)/', $key_and_value, $matches) &&
300 mb_detect_encoding($matches[2]) != 'ASCII') {
301 $_GET[$matches[1]] = $matches[2];
306 /////////////////////////////////////////////////
311 $cookie = & $_COOKIE;
313 // GET + POST = $vars
315 $vars = & $_GET; // Major pattern: Read-only access via GET
316 } else if (empty($_GET)) {
317 $vars = & $_POST; // Minor pattern: Write access via POST etc.
319 $vars = array_merge($_GET, $_POST); // Considered reliable than $_REQUEST
322 // ÆþÎÏ¥Á¥§¥Ã¥¯: 'cmd=' and 'plugin=' can't live together
323 if (isset($vars['cmd']) && isset($vars['plugin']))
324 die('Using both cmd= and plugin= is not allowed');
326 // ÆþÎÏ¥Á¥§¥Ã¥¯: cmd, plugin ¤Îʸ»úÎó¤Ï±Ñ¿ô»ú°Ê³°¤¢¤ê¤¨¤Ê¤¤
327 foreach(array('cmd', 'plugin') as $var) {
328 if (isset($vars[$var]) && ! preg_match('/^[a-zA-Z][a-zA-Z0-9_]*$/', $vars[$var]))
329 unset($get[$var], $post[$var], $vars[$var]);
332 // À°·Á: page, strip_bracket()
333 if (isset($vars['page'])) {
334 $get['page'] = $post['page'] = $vars['page'] = strip_bracket($vars['page']);
336 $get['page'] = $post['page'] = $vars['page'] = '';
339 // À°·Á: msg, ²þ¹Ô¤ò¼è¤ê½ü¤¯
340 if (isset($vars['msg'])) {
341 $get['msg'] = $post['msg'] = $vars['msg'] = str_replace("\r", '', $vars['msg']);
344 // ¸åÊý¸ß´¹À (?md5=...)
345 if (isset($get['md5']) && $get['md5'] != '' &&
346 ! isset($vars['cmd']) && ! isset($vars['plugin'])) {
347 $get['cmd'] = $post['cmd'] = $vars['cmd'] = 'md5';
351 if (isset($vars['tb_id']) && $vars['tb_id'] != '') {
352 $get['cmd'] = $post['cmd'] = $vars['cmd'] = 'tb';
355 // cmd¤âplugin¤â»ØÄꤵ¤ì¤Æ¤¤¤Ê¤¤¾ì¹ç¤Ï¡¢QUERY_STRING¤ò¥Ú¡¼¥¸Ì¾¤«InterWikiName¤Ç¤¢¤ë¤È¤ß¤Ê¤¹
356 if (! isset($vars['cmd']) && ! isset($vars['plugin'])) {
358 $get['cmd'] = $post['cmd'] = $vars['cmd'] = 'read';
360 if ($arg == '') $arg = $defaultpage;
361 $arg = rawurldecode($arg);
362 $arg = strip_bracket($arg);
363 $arg = input_filter($arg);
364 $get['page'] = $post['page'] = $vars['page'] = $arg;
367 /////////////////////////////////////////////////
368 // ½é´üÀßÄê($WikiName,$BracketName¤Ê¤É)
369 // $WikiName = '[A-Z][a-z]+(?:[A-Z][a-z]+)+';
370 // $WikiName = '\b[A-Z][a-z]+(?:[A-Z][a-z]+)+\b';
371 // $WikiName = '(?<![[:alnum:]])(?:[[:upper:]][[:lower:]]+){2,}(?![[:alnum:]])';
372 // $WikiName = '(?<!\w)(?:[A-Z][a-z]+){2,}(?!\w)';
374 // BugTrack/304»ÃÄêÂнè
375 $WikiName = '(?:[A-Z][a-z]+){2,}(?!\w)';
377 // $BracketName = ':?[^\s\]#&<>":]+:?';
378 $BracketName = '(?!\s):?[^\r\n\t\f\[\]<>#&":]+:?(?<!\s)';
381 $InterWikiName = '(\[\[)?((?:(?!\s|:|\]\]).)+):(.+)(?(1)\]\])';
384 $NotePattern = '/\(\(((?:(?>(?:(?!\(\()(?!\)\)(?:[^\)]|$)).)+)|(?R))*)\)\)/ex';
386 /////////////////////////////////////////////////
387 // ½é´üÀßÄê(¥æ¡¼¥¶ÄêµÁ¥ë¡¼¥ëÆɤ߹þ¤ß)
388 require(DATA_HOME . 'rules.ini.php');
390 /////////////////////////////////////////////////
391 // ½é´üÀßÄê(¤½¤Î¾¤Î¥°¥í¡¼¥Ð¥ëÊÑ¿ô)
394 $now = format_date(UTIME);
396 // Æü»þÃÖ´¹¥ë¡¼¥ë¤ò$line_rules¤Ë²Ã¤¨¤ë
397 if ($usedatetime) $line_rules += $datetime_rules;
398 unset($datetime_rules);
400 // ¥Õ¥§¥¤¥¹¥Þ¡¼¥¯¤ò$line_rules¤Ë²Ã¤¨¤ë
401 if ($usefacemark) $line_rules += $facemark_rules;
402 unset($facemark_rules);
404 // ¼ÂÂλ²¾È¥Ñ¥¿¡¼¥ó¤ª¤è¤Ó¥·¥¹¥Æ¥à¤Ç»ÈÍѤ¹¤ë¥Ñ¥¿¡¼¥ó¤ò$line_rules¤Ë²Ã¤¨¤ë
405 //$entity_pattern = '[a-zA-Z0-9]{2,8}';
406 $entity_pattern = trim(join('', file(CACHE_DIR . 'entities.dat')));
408 $line_rules = array_merge(array(
409 '&(#[0-9]+|#x[0-9a-f]+|' . $entity_pattern . ');' => '&$1;',
410 "\r" => '<br />' . "\n", /* ¹ÔËö¤Ë¥Á¥ë¥À¤Ï²þ¹Ô */