plugin/paint.inc.php

   1 <?php
   2 /////////////////////////////////////////////////
   3 // PukiWiki - Yet another WikiWikiWeb clone.
   4 //
   5 // $Id: paint.inc.php,v 1.17 2005/01/08 04:13:19 henoheno Exp $
   6 //
   7
   8 /*
   9 *¥×¥é¥°¥¤¥ó paint
  10 ³¨¤òÉÁ¤¯
  11
  12 *Usage
  13  #paint(width,height)
  14
  15 *¥Ñ¥é¥á¡¼¥¿
  16 -width,height~
  17  ¥¥ã¥ó¥Ð¥¹¤ÎÉý¤È¹â¤µ
  18
  19 */
  20
  21 // ÁÞÆþ¤¹¤ë°ÌÃÖ 1:Íó¤ÎÁ° 0:Íó¤Î¸å
  22 define('PAINT_INSERT_INS',0);
  23 //
  24 // ¥Ç¥Õ¥©¥ë¥È¤ÎÉÁ²èÎÎ°è¤ÎÉý¤È¹â¤µ
  25 define('PAINT_DEFAULT_WIDTH',80);
  26 define('PAINT_DEFAULT_HEIGHT',60);
  27 //
  28 // ÉÁ²èÎÎ°è¤ÎÉý¤È¹â¤µ¤ÎÀ©¸ÂÃÍ
  29 define('PAINT_MAX_WIDTH',320);
  30 define('PAINT_MAX_HEIGHT',240);
  31 //
  32 // ¥¢¥×¥ì¥Ã¥ÈÎÎ°è¤ÎÉý¤È¹â¤µ 50x50Ì¤Ëþ¤ÇÊÌ¥¦¥¤¥ó¥É¥¦¤¬³«¤¯
  33 define('PAINT_APPLET_WIDTH',800);
  34 define('PAINT_APPLET_HEIGHT',300);
  35 //
  36 //¥³¥á¥ó¥È¤ÎÁÞÆþ¥Õ¥©¡¼¥Þ¥Ã¥È
  37 define('PAINT_NAME_FORMAT','[[$name]]');
  38 define('PAINT_MSG_FORMAT','$msg');
  39 define('PAINT_NOW_FORMAT','&new{$now};');
  40 //¥á¥Ã¥»¡¼¥¸¤¬¤¢¤ë¾ì¹ç
  41 define('PAINT_FORMAT',"\x08MSG\x08 -- \x08NAME\x08 \x08NOW\x08");
  42 //¥á¥Ã¥»¡¼¥¸¤¬¤Ê¤¤¾ì¹ç
  43 define('PAINT_FORMAT_NOMSG',"\x08NAME\x08 \x08NOW\x08");
  44
  45 function plugin_paint_action()
  46 {
  47         global $script, $vars, $pkwk_dtd, $_paint_messages;
  48
  49         //Ìá¤êÃÍ¤ò½é´ü²½
  50         $retval['msg'] = $_paint_messages['msg_title'];
  51         $retval['body'] = '';
  52
  53         if (array_key_exists('attach_file',$_FILES)
  54                 and array_key_exists('refer',$vars))
  55         {
  56                 $file = $_FILES['attach_file'];
  57                 //BBSPaiter.jar¤Ï¡¢shift-jis¤ÇÆâÍÆ¤òÁ÷¤Ã¤Æ¤¯¤ë¡£ÌÌÅÝ¤Ê¤Î¤Ç¥Ú¡¼¥¸Ì¾¤Ï¥¨¥ó¥³¡¼¥É¤·¤Æ¤«¤éÁ÷¿®¤µ¤»¤ë¤è¤¦¤Ë¤·¤¿¡£
  58                 $vars['page'] = $vars['refer'] = decode($vars['refer']);
  59
  60                 $filename = $vars['filename'];
  61                 $filename = mb_convert_encoding($filename,SOURCE_ENCODING,'auto');
  62
  63                 //¥Õ¥¡¥¤¥ëÌ¾ÃÖ´¹
  64                 $attachname = preg_replace('/^[^\.]+/',$filename,$file['name']);
  65                 //¤¹¤Ç¤ËÂ¸ºß¤·¤¿¾ì¹ç¡¢ ¥Õ¥¡¥¤¥ëÌ¾¤Ë'_0','_1',...¤òÉÕ¤±¤Æ²óÈò(¸ÈÂ©)
  66                 $count = '_0';
  67                 while (file_exists(UPLOAD_DIR.encode($vars['refer']).'_'.encode($attachname)))
  68                 {
  69                         $attachname = preg_replace('/^[^\.]+/',$filename.$count++,$file['name']);
  70                 }
  71
  72                 $file['name'] = $attachname;
  73
  74                 if (!exist_plugin('attach') or !function_exists('attach_upload'))
  75                 {
  76                         return array('msg'=>'attach.inc.php not found or not correct version.');
  77                 }
  78
  79                 $retval = attach_upload($file,$vars['refer'],TRUE);
  80                 if ($retval['result'] == TRUE)
  81                 {
  82                         $retval = paint_insert_ref($file['name']);
  83                 }
  84         }
  85         else
  86         {
  87                 $message = '';
  88                 $r_refer = $s_refer = '';
  89                 if (array_key_exists('refer',$vars))
  90                 {
  91                         $r_refer = rawurlencode($vars['refer']);
  92                         $s_refer = htmlspecialchars($vars['refer']);
  93                 }
  94                 $link = "<p><a href=\"$script?$r_refer\">$s_refer</a></p>";;
  95
  96                 $w = PAINT_APPLET_WIDTH;
  97                 $h = PAINT_APPLET_HEIGHT;
  98
  99                 //¥¦¥¤¥ó¥É¥¦¥â¡¼¥É :)
 100                 if ($w < 50 and $h < 50)
 101                 {
 102                         $w = $h = 0;
 103                         $retval['msg'] = '';
 104                         $vars['page'] = $vars['refer'];
 105                         $vars['cmd'] = 'read';
 106                         $retval['body'] = convert_html(get_source($vars['refer']));
 107                         $link = '';
 108                 }
 109
 110                 //XSSÀÈ¼åÀÌäÂê - ³°Éô¤«¤éÍè¤¿ÊÑ¿ô¤ò¥¨¥¹¥±¡¼¥×
 111                 $width = empty($vars['width']) ? PAINT_DEFAULT_WIDTH : $vars['width'];
 112                 $height = empty($vars['height']) ? PAINT_DEFAULT_HEIGHT : $vars['height'];
 113                 $f_w = (is_numeric($width) and $width > 0) ? $width : PAINT_DEFAULT_WIDTH;
 114                 $f_h = (is_numeric($height) and $height > 0) ? $height : PAINT_DEFAULT_HEIGHT;
 115                 $f_refer = array_key_exists('refer',$vars) ? encode($vars['refer']) : ''; // BBSPainter.jar¤¬shift-jis¤ËÊÑ´¹¤¹¤ë¤Î¤ò²óÈò
 116                 $f_digest = array_key_exists('digest',$vars) ? htmlspecialchars($vars['digest']) : '';
 117                 $f_no = (array_key_exists('paint_no',$vars) and is_numeric($vars['paint_no'])) ?
 118                         $vars['paint_no'] + 0 : 0;
 119
 120                 if ($f_w > PAINT_MAX_WIDTH)
 121                 {
 122                         $f_w = PAINT_MAX_WIDTH;
 123                 }
 124                 if ($f_h > PAINT_MAX_HEIGHT)
 125                 {
 126                         $f_h = PAINT_MAX_HEIGHT;
 127                 }
 128
 129                 $retval['body'] .= <<<EOD
 130  <div>
 131  $link
 132  $message
 133  <applet codebase="." archive="BBSPainter.jar" code="Main.class" width="$w" height="$h">
 134  <param name="size" value="$f_w,$f_h" />
 135  <param name="action" value="$script" />
 136  <param name="image" value="attach_file" />
 137  <param name="form1" value="filename={$_paint_messages['field_filename']}=!" />
 138  <param name="form2" value="yourname={$_paint_messages['field_name']}" />
 139  <param name="comment" value="msg={$_paint_messages['field_comment']}" />
 140  <param name="param1" value="plugin=paint" />
 141  <param name="param2" value="refer=$f_refer" />
 142  <param name="param3" value="digest=$f_digest" />
 143  <param name="param4" value="max_file_size=1000000" />
 144  <param name="param5" value="paint_no=$f_no" />
 145  <param name="enctype" value="multipart/form-data" />
 146  <param name="return.URL" value="$script?$r_refer" />
 147  </applet>
 148  </div>
 149 EOD;
 150                 // XHTML 1.0 Transitional
 151                 if (! isset($pkwk_dtd) || $pkwk_dtd == PKWK_DTD_XHTML_1_1)
 152                         $pkwk_dtd = PKWK_DTD_XHTML_1_0_TRANSITIONAL;
 153         }
 154         return $retval;
 155 }
 156 function plugin_paint_convert()
 157 {
 158         global $script,$vars,$digest;
 159         global $_paint_messages;
 160         static $numbers = array();
 161
 162         if (!array_key_exists($vars['page'],$numbers))
 163         {
 164                 $numbers[$vars['page']] = 0;
 165         }
 166         $paint_no = $numbers[$vars['page']]++;
 167
 168         //Ìá¤êÃÍ
 169         $ret = '';
 170
 171         //Ê¸»úÎó¤ò¼èÆÀ
 172         $width = $height = 0;
 173         $args = func_get_args();
 174         if (count($args) >= 2)
 175         {
 176                 $width = array_shift($args);
 177                 $height = array_shift($args);
 178         }
 179         if (!is_numeric($width) or $width <= 0)
 180         {
 181                 $width = PAINT_DEFAULT_WIDTH;
 182         }
 183         if (!is_numeric($height) or $height <= 0)
 184         {
 185                 $height = PAINT_DEFAULT_HEIGHT;
 186         }
 187
 188         //XSSÀÈ¼åÀÌäÂê - ³°Éô¤«¤éÍè¤¿ÊÑ¿ô¤ò¥¨¥¹¥±¡¼¥×
 189         $f_page = htmlspecialchars($vars['page']);
 190
 191         $max = sprintf($_paint_messages['msg_max'],PAINT_MAX_WIDTH,PAINT_MAX_HEIGHT);
 192
 193         $ret = <<<EOD
 194   <form action="$script" method="post">
 195   <div>
 196   <input type="hidden" name="paint_no" value="$paint_no" />
 197   <input type="hidden" name="digest" value="$digest" />
 198   <input type="hidden" name="plugin" value="paint" />
 199   <input type="hidden" name="refer" value="$f_page" />
 200   <input type="text" name="width" size="3" value="$width" />
 201   x
 202   <input type="text" name="height" size="3" value="$height" />
 203   $max
 204   <input type="submit" value="{$_paint_messages['btn_submit']}" />
 205   </div>
 206   </form>
 207 EOD;
 208         return $ret;
 209 }
 210 function paint_insert_ref($filename)
 211 {
 212         global $script,$vars,$now,$do_backup;
 213         global $_paint_messages,$_no_name;
 214
 215         $ret['msg'] = $_paint_messages['msg_title'];
 216
 217         $msg = mb_convert_encoding(rtrim($vars['msg']),SOURCE_ENCODING,'auto');
 218         $name = mb_convert_encoding($vars['yourname'],SOURCE_ENCODING,'auto');
 219
 220         $msg  = str_replace('$msg',$msg,PAINT_MSG_FORMAT);
 221         $name = ($name == '') ? $_no_name : $vars['yourname'];
 222         $name = ($name == '') ? '' : str_replace('$name',$name,PAINT_NAME_FORMAT);
 223         $now  = str_replace('$now',$now,PAINT_NOW_FORMAT);
 224
 225         $msg = trim($msg);
 226         $msg = ($msg == '') ?
 227                 PAINT_FORMAT_NOMSG :
 228                 str_replace("\x08MSG\x08", $msg, PAINT_FORMAT);
 229         $msg = str_replace("\x08NAME\x08",$name, $msg);
 230         $msg = str_replace("\x08NOW\x08",$now, $msg);
 231
 232         //¥Ö¥í¥Ã¥¯¤Ë¿©¤ï¤ì¤Ê¤¤¤è¤¦¤Ë¡¢#clear¤ÎÄ¾Á°¤Ë\n¤ò2¸Ä½ñ¤¤¤Æ¤ª¤¯
 233         $msg = "#ref($filename,wrap,around)\n" . trim($msg) . "\n\n" .
 234                 "#clear\n";
 235
 236         $postdata_old = get_source($vars['refer']);
 237         $postdata = '';
 238         $paint_no = 0; //'#paint'¤Î½Ð¸½²ó¿ô
 239         foreach ($postdata_old as $line)
 240         {
 241                 if (!PAINT_INSERT_INS)
 242                 {
 243                         $postdata .= $line;
 244                 }
 245                 if (preg_match('/^#paint/i',$line))
 246                 {
 247                         if ($paint_no == $vars['paint_no'])
 248                         {
 249                                 $postdata .= $msg;
 250                         }
 251                         $paint_no++;
 252                 }
 253                 if (PAINT_INSERT_INS)
 254                 {
 255                         $postdata .= $line;
 256                 }
 257         }
 258
 259         // ¹¹¿·¤Î¾×ÆÍ¤ò¸¡½Ð
 260         if (md5(join('',$postdata_old)) != $vars['digest'])
 261         {
 262                 $ret['msg'] = $_paint_messages['msg_title_collided'];
 263                 $ret['body'] = $_paint_messages['msg_collided'];
 264         }
 265
 266         page_write($vars['refer'],$postdata);
 267
 268         return $ret;
 269 }
 270 ?>