<?php
// PukiWiki - Yet another WikiWikiWeb clone.
-// $Id: html.php,v 1.43 2005/10/02 16:15:05 henoheno Exp $
-// Copyright (C)
-// 2002-2005 PukiWiki Developers Team
+// html.php
+// Copyright
+// 2002-2017 PukiWiki Development Team
// 2001-2002 Originally written by yu-ji
// License: GPL v2 or (at your option) any later version
//
// Show page-content
function catbody($title, $page, $body)
{
- global $script, $vars, $arg, $defaultpage, $whatsnew, $help_page, $hr;
+ global $vars, $arg, $defaultpage, $whatsnew, $help_page, $hr;
global $attach_link, $related_link, $cantedit, $function_freeze;
global $search_word_color, $_msg_word, $foot_explain, $note_hr, $head_tags;
- global $trackback, $trackback_javascript, $referer, $javascript;
- global $nofollow;
+ global $javascript, $nofollow;
global $_LANG, $_LINK, $_IMAGE;
+ global $auth_type, $auth_user;
global $pkwk_dtd; // XHTML 1.1, XHTML1.0, HTML 4.01 Transitional...
global $page_title; // Title of this site
global $modifier; // Site administrator's web page
global $modifierlink; // Site administrator's name
+ $script = get_base_uri();
+ $enable_login = false;
+ $enable_logout = false;
+ if (AUTH_TYPE_FORM === $auth_type || AUTH_TYPE_EXTERNAL === $auth_type ||
+ AUTH_TYPE_SAML === $auth_type) {
+ if ($auth_user) {
+ $enable_logout = true;
+ } else {
+ $enable_login = true;
+ }
+ } else if (AUTH_TYPE_BASIC === $auth_type) {
+ if ($auth_user) {
+ $enable_logout = true;
+ }
+ }
if (! file_exists(SKIN_FILE) || ! is_readable(SKIN_FILE))
die_message('SKIN_FILE is not found');
$_LINK = $_IMAGE = array();
- // Add JavaScript header when ...
- if ($trackback && $trackback_javascript) $javascript = 1; // Set something If you want
- if (! PKWK_ALLOW_JAVASCRIPT) unset($javascript);
-
$_page = isset($vars['page']) ? $vars['page'] : '';
- $r_page = rawurlencode($_page);
+ $r_page = pagename_urlencode($_page);
+
+ // Canonical URL
+ $canonical_url = get_page_uri($_page, PKWK_URI_ABSOLUTE);
// Set $_LINK for skin
$_LINK['add'] = "$script?cmd=add&page=$r_page";
$_LINK['edit'] = "$script?cmd=edit&page=$r_page";
$_LINK['filelist'] = "$script?cmd=filelist";
$_LINK['freeze'] = "$script?cmd=freeze&page=$r_page";
- $_LINK['help'] = "$script?" . rawurlencode($help_page);
+ $_LINK['help'] = get_page_uri($help_page);
$_LINK['list'] = "$script?cmd=list";
$_LINK['new'] = "$script?plugin=newpage&refer=$r_page";
$_LINK['rdf'] = "$script?cmd=rss&ver=1.0";
- $_LINK['recent'] = "$script?" . rawurlencode($whatsnew);
- $_LINK['refer'] = "$script?plugin=referer&page=$r_page";
- $_LINK['reload'] = "$script?$r_page";
+ $_LINK['recent'] = get_page_uri($whatsnew);
+ $_LINK['reload'] = get_page_uri($_page);
$_LINK['rename'] = "$script?plugin=rename&refer=$r_page";
$_LINK['rss'] = "$script?cmd=rss";
$_LINK['rss10'] = "$script?cmd=rss&ver=1.0"; // Same as 'rdf'
$_LINK['rss20'] = "$script?cmd=rss&ver=2.0";
$_LINK['search'] = "$script?cmd=search";
- $_LINK['top'] = "$script?" . rawurlencode($defaultpage);
- if ($trackback) {
- $tb_id = tb_get_id($_page);
- $_LINK['trackback'] = "$script?plugin=tb&__mode=view&tb_id=$tb_id";
- }
+ $_LINK['top'] = get_page_uri($defaultpage);
$_LINK['unfreeze'] = "$script?cmd=unfreeze&page=$r_page";
$_LINK['upload'] = "$script?plugin=attach&pcmd=upload&page=$r_page";
+ $_LINK['canonical_url'] = $canonical_url;
+ $login_link = "#LOGIN_ERROR"; // dummy link that is not used
+ switch ($auth_type) {
+ case AUTH_TYPE_FORM:
+ $login_link = "$script?plugin=loginform&pcmd=login&page=$r_page";
+ break;
+ case AUTH_TYPE_EXTERNAL:
+ case AUTH_TYPE_SAML:
+ $login_link = get_auth_external_login_url($_page, $_LINK['reload']);
+ break;
+ }
+ $_LINK['login'] = htmlsc($login_link);
+ $_LINK['logout'] = "$script?plugin=loginform&pcmd=logout&page=$r_page";
// Compat: Skins for 1.4.4 and before
$link_add = & $_LINK['add'];
$link_whatsnew = & $_LINK['recent'];
$link_backup = & $_LINK['backup'];
$link_help = & $_LINK['help'];
- $link_trackback = & $_LINK['trackback']; // New!
+ $link_trackback = ''; // Removed (compat)
$link_rdf = & $_LINK['rdf']; // New!
$link_rss = & $_LINK['rss'];
$link_rss10 = & $_LINK['rss10']; // New!
$link_unfreeze = & $_LINK['unfreeze'];
$link_upload = & $_LINK['upload'];
$link_template = & $_LINK['copy'];
- $link_refer = & $_LINK['refer']; // New!
+ $link_refer = ''; // Removed (compat)
$link_rename = & $_LINK['rename'];
// Init flags
' ' . get_pg_passage($_page, FALSE) : '';
// List of attached files to the page
- $attaches = ($attach_link && $is_read && exist_plugin_action('attach')) ?
+ $show_attaches = $is_read || arg_check('edit');
+ $attaches = ($attach_link && $show_attaches && exist_plugin_action('attach')) ?
attach_filelist() : '';
// List of related pages
// Last modification date (UNIX timestamp) of the page
$fmt = $is_read ? get_filetime($_page) + LOCALZONE : 0;
+ // Output nofollow / noindex regardless os skin file
+ if (!$is_read || $nofollow) {
+ if (!headers_sent()) {
+ header("X-Robots-Tag: noindex,nofollow");
+ }
+ }
+
+ // Send Canonical URL for Search Engine Optimization
+ if ($is_read && !headers_sent()) {
+ header("Link: <$canonical_url>; rel=\"canonical\"");
+ }
+
// Search words
if ($search_word_color && isset($vars['word'])) {
- $body = '<div class="small">' . $_msg_word . htmlspecialchars($vars['word']) .
+ $body = '<div class="small">' . $_msg_word . htmlsc($vars['word']) .
'</div>' . $hr . "\n" . $body;
- // Only variables can be passed by reference from PHP 5.0.5
- // with array_splice()
- $tmp_array = preg_split('/\s+/', $vars['word'], -1, PREG_SPLIT_NO_EMPTY);
+ // BugTrack2/106: Only variables can be passed by reference from PHP 5.0.5
+ // with array_splice(), array_flip()
+ $words = preg_split('/\s+/', $vars['word'], -1, PREG_SPLIT_NO_EMPTY);
+ $words = array_splice($words, 0, 10); // Max: 10 words
+ $words = array_flip($words);
- $words = array_flip(array_splice($tmp_array, 0, 10));
$keys = array();
foreach ($words as $word=>$id) $keys[$word] = strlen($word);
arsort($keys, SORT_NUMERIC);
$keys = get_search_words(array_keys($keys), TRUE);
$id = 0;
foreach ($keys as $key=>$pattern) {
- $s_key = htmlspecialchars($key);
- $pattern = '/<[^>]*>|(' . $pattern . ')|&[^;]+;/';
- $callback = create_function(
- '$arr',
- 'return (count($arr) > 1) ? \'<strong class="word' .
- $id++ . '">\' . $arr[1] . \'</strong>\' : $arr[0];'
+ $s_key = htmlsc($key);
+ $pattern = '/' .
+ '<textarea[^>]*>.*?<\/textarea>' . // Ignore textareas
+ '|' . '<[^>]*>' . // Ignore tags
+ '|' . '&[^;]+;' . // Ignore entities
+ '|' . '(' . $pattern . ')' . // $matches[1]: Regex for a search word
+ '/sS';
+ $decorate_Nth_word = create_function(
+ '$matches',
+ 'return (isset($matches[1])) ? ' .
+ '\'<strong class="word' .
+ $id .
+ '">\' . $matches[1] . \'</strong>\' : ' .
+ '$matches[0];'
);
- $body = preg_replace_callback($pattern, $callback, $body);
- $notes = preg_replace_callback($pattern, $callback, $notes);
+ $body = preg_replace_callback($pattern, $decorate_Nth_word, $body);
+ $notes = preg_replace_callback($pattern, $decorate_Nth_word, $notes);
+ ++$id;
}
}
- $longtaketime = getmicrotime() - MUTIME;
- $taketime = sprintf('%01.03f', $longtaketime);
+ // Embed Scripting data
+ $html_scripting_data = get_html_scripting_data();
+
+ // Compat: 'HTML convert time' without time about MenuBar and skin
+ $taketime = elapsedtime();
require(SKIN_FILE);
}
+/**
+ * Get data used by JavaScript modules
+ */
+function get_html_scripting_data()
+{
+ global $ticket_link_sites;
+ if (!isset($ticket_link_sites) || !is_array($ticket_link_sites)) {
+ return '';
+ }
+ $is_utf8 = (bool)defined('PKWK_UTF8_ENABLE');
+ // Require: PHP 5.4+
+ $json_enabled = defined('JSON_UNESCAPED_UNICODE');
+ if (!$json_enabled) {
+ $empty_data = <<<EOS
+<div id="pukiwiki-site-properties" style="display:none;">
+</div>
+EOS;
+ return $empty_data;
+ }
+ // Site basic Properties
+ $props = array(
+ 'is_utf8' => $is_utf8,
+ 'json_enabled' => $json_enabled,
+ 'base_uri_pathname' => get_base_uri(PKWK_URI_ROOT),
+ 'base_uri_absolute' => get_base_uri(PKWK_URI_ABSOLUTE)
+ );
+ $props_json = htmlsc(json_encode($props, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES));
+ $site_props = <<<EOS
+<div data-key="site-props" data-value="$props_json"></div>
+EOS;
+ // AutoTicketLink
+ $filtered_ticket_link_sites = array();
+ foreach ($ticket_link_sites as $s) {
+ if (!preg_match('/^([a-zA-Z0-9]+)([\.\-][a-zA-Z0-9]+)*$/', $s['key'])) {
+ continue;
+ }
+ array_push($filtered_ticket_link_sites, $s);
+ }
+ $h_ticket_link_sites = htmlsc(json_encode($filtered_ticket_link_sites,
+ JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES));
+ $ticketlink_data = <<<EOS
+<input type="hidden" class="ticketlink-def" value="$h_ticket_link_sites" />
+EOS;
+ $data = <<<EOS
+<div id="pukiwiki-site-properties" style="display:none;">
+$site_props
+$ticketlink_data
+</div>
+EOS;
+ return $data;
+}
+
// Show 'edit' form
function edit_form($page, $postdata, $digest = FALSE, $b_template = TRUE)
{
- global $script, $vars, $rows, $cols, $hr, $function_freeze;
- global $_btn_addtop, $_btn_preview, $_btn_repreview, $_btn_update, $_btn_cancel,
- $_msg_help, $_btn_notchangetimestamp;
- global $whatsnew, $_btn_template, $_btn_load, $non_list, $load_template_func;
+ global $vars, $rows, $cols, $hr, $function_freeze;
+ global $_btn_preview, $_btn_repreview, $_btn_update, $_btn_cancel, $_msg_help;
+ global $whatsnew, $_btn_template, $_btn_load, $load_template_func;
global $notimeupdate;
+ global $_title_list, $_label_template_pages;
+ global $rule_page;
+ $script = get_base_uri();
// Newly generate $digest or not
if ($digest === FALSE) $digest = md5(join('', get_source($page)));
- $refer = $template = $addtag = $add_top = '';
-
- $checked_top = isset($vars['add_top']) ? ' checked="checked"' : '';
- $checked_time = isset($vars['notimestamp']) ? ' checked="checked"' : '';
-
+ $refer = $template = '';
+
+ // Add plugin
+ $addtag = $add_top = '';
if(isset($vars['add'])) {
- $addtag = '<input type="hidden" name="add" value="true" />';
- $add_top = '<input type="checkbox" name="add_top" value="true"' .
- $checked_top . ' /><span class="small">' .
- $_btn_addtop . '</span>';
+ global $_btn_addtop;
+ $addtag = '<input type="hidden" name="add" value="true" />';
+ $add_top = isset($vars['add_top']) ? ' checked="checked"' : '';
+ $add_top = '<input type="checkbox" name="add_top" ' .
+ 'id="_edit_form_add_top" value="true"' . $add_top . ' />' . "\n" .
+ ' <label for="_edit_form_add_top">' .
+ '<span class="small">' . $_btn_addtop . '</span>' .
+ '</label>';
}
if($load_template_func && $b_template) {
- $pages = array();
- $non_list_pattern = '/' . $non_list . '/';
+ $tpage_names = array(); // Pages marked as template
+ $template_page = ':config/Templates';
+ $page_max = 100;
+ foreach(get_source($template_page) as $_templates) {
+ $m = array();
+ if (! preg_match('#\-\s*\[\[([^\[\]]+)\]\]#', $_templates, $m)) continue;
+ $tpage = preg_replace('#^./#', "$template_page/", $m[1]);
+ if (! is_page($tpage)) continue;
+ $tpage_names[] = $tpage;
+ }
+ $page_names = array();
foreach(get_existpages() as $_page) {
- if ($_page == $whatsnew || preg_match($non_list_pattern, $_page))
+ if ($_page == $whatsnew || check_non_list($_page) ||
+ !is_page_readable($_page))
continue;
- $s_page = htmlspecialchars($_page);
- $pages[$_page] = ' <option value="' . $s_page . '">' .
- $s_page . '</option>';
+ if (preg_match('/template/i', $_page)) {
+ $tpage_names[] = $_page;
+ } else {
+ if (count($page_names) >= $page_max) continue;
+ $page_names[] = $_page;
+ }
+ }
+ $tpage_names2 = array_values(array_unique($tpage_names));
+ natcasesort($tpage_names2);
+ natcasesort($page_names);
+ $tpages = array(); // Template pages
+ $npages = array(); // Normal pages
+ foreach($tpage_names2 as $p) {
+ $ps = htmlsc($p);
+ $tpages[] = ' <option value="' . $ps . '">' . $ps . '</option>';
}
- ksort($pages);
- $s_pages = join("\n", $pages);
+ foreach($page_names as $p) {
+ $ps = htmlsc($p);
+ $npages[] = ' <option value="' . $ps . '">' . $ps . '</option>';
+ }
+ if (count($page_names) === $page_max) {
+ $npages[] = ' <option value="">...</option>';
+ }
+ $s_tpages = join("\n", $tpages);
+ $s_npages = join("\n", $npages);
$template = <<<EOD
<select name="template_page">
<option value="">-- $_btn_template --</option>
-$s_pages
+ <optgroup label="$_label_template_pages">
+$s_tpages
+ </optgroup>
+ <optgroup label="$_title_list">
+$s_npages
+ </optgroup>
</select>
<input type="submit" name="template" value="$_btn_load" accesskey="r" />
<br />
}
$r_page = rawurlencode($page);
- $s_page = htmlspecialchars($page);
- $s_digest = htmlspecialchars($digest);
- $s_postdata = htmlspecialchars($refer . $postdata);
- $s_original = isset($vars['original']) ? htmlspecialchars($vars['original']) : $s_postdata;
+ $s_page = htmlsc($page);
+ $s_digest = htmlsc($digest);
+ $s_postdata = htmlsc($refer . $postdata);
+ $s_original = isset($vars['original']) ? htmlsc($vars['original']) : $s_postdata;
$b_preview = isset($vars['preview']); // TRUE when preview
$btn_preview = $b_preview ? $_btn_repreview : $_btn_preview;
+ // Checkbox 'do not change timestamp'
$add_notimestamp = '';
- if ( $notimeupdate != 0 ) {
- // enable 'do not change timestamp'
- $add_notimestamp = <<<EOD
- <input type="checkbox" name="notimestamp" id="_edit_form_notimestamp" value="true"$checked_time />
- <label for="_edit_form_notimestamp"><span class="small">$_btn_notchangetimestamp</span></label>
-EOD;
- if ( $notimeupdate == 2 ) {
- // enable only administrator
- $add_notimestamp .= <<<EOD
- <input type="password" name="pass" size="12" />
-EOD;
+ if ($notimeupdate != 0) {
+ global $_btn_notchangetimestamp;
+ $checked_time = isset($vars['notimestamp']) ? ' checked="checked"' : '';
+ // Only for administrator
+ if ($notimeupdate == 2) {
+ $add_notimestamp = ' ' .
+ '<input type="password" name="pass" size="12" />' . "\n";
}
- $add_notimestamp .= ' ';
+ $add_notimestamp = '<input type="checkbox" name="notimestamp" ' .
+ 'id="_edit_form_notimestamp" value="true"' . $checked_time . ' />' . "\n" .
+ ' ' . '<label for="_edit_form_notimestamp"><span class="small">' .
+ $_btn_notchangetimestamp . '</span></label>' . "\n" .
+ $add_notimestamp .
+ ' ';
}
+ // 'margin-bottom', 'float:left', and 'margin-top'
+ // are for layout of 'cancel button'
$body = <<<EOD
-<form action="$script" method="post">
- <div class="edit_form">
+<div class="edit_form">
+ <form action="$script" method="post" style="margin-bottom:0px;">
$template
$addtag
<input type="hidden" name="cmd" value="edit" />
<input type="hidden" name="digest" value="$s_digest" />
<textarea name="msg" rows="$rows" cols="$cols">$s_postdata</textarea>
<br />
- <input type="submit" name="preview" value="$btn_preview" accesskey="p" />
- <input type="submit" name="write" value="$_btn_update" accesskey="s" />
- $add_top
- $add_notimestamp
- <input type="submit" name="cancel" value="$_btn_cancel" accesskey="c" />
+ <div style="float:left;">
+ <input type="submit" name="preview" value="$btn_preview" accesskey="p" />
+ <input type="submit" name="write" value="$_btn_update" accesskey="s" />
+ $add_top
+ $add_notimestamp
+ </div>
<textarea name="original" rows="1" cols="1" style="display:none">$s_original</textarea>
- </div>
-</form>
+ </form>
+ <form action="$script" method="post" style="margin-top:0px;">
+ <input type="hidden" name="cmd" value="edit" />
+ <input type="hidden" name="page" value="$s_page" />
+ <input type="submit" name="cancel" value="$_btn_cancel" accesskey="c" />
+ </form>
+</div>
EOD;
- if (isset($vars['help'])) {
- $body .= $hr . catrule();
- } else {
- $body .= '<ul><li><a href="' .
- $script . '?cmd=edit&help=true&page=' . $r_page .
- '">' . $_msg_help . '</a></li></ul>';
- }
-
+ $body .= '<ul><li><a href="' .
+ get_page_uri($rule_page) .
+ '" target="_blank">' . $_msg_help . '</a></li></ul>';
return $body;
}
// Related pages
function make_related($page, $tag = '')
{
- global $script, $vars, $rule_related_str, $related_str, $non_list;
- global $_ul_left_margin, $_ul_margin, $_list_pad_str;
+ global $vars, $rule_related_str, $related_str;
+ $script = get_base_uri();
+ prepare_links_related($page);
$links = links_get_related($page);
if ($tag) {
- ksort($links);
+ ksort($links, SORT_STRING); // Page name, alphabetical order
} else {
- arsort($links);
+ arsort($links, SORT_NUMERIC); // Last modified date, newer
}
$_links = array();
- $non_list_pattern = '/' . $non_list . '/';
foreach ($links as $page=>$lastmod) {
- if (preg_match($non_list_pattern, $page)) continue;
+ if (check_non_list($page)) continue;
- $r_page = rawurlencode($page);
- $s_page = htmlspecialchars($page);
+ $page_uri = get_page_uri($page);
+ $s_page = htmlsc($page);
$passage = get_passage($lastmod);
$_links[] = $tag ?
- '<a href="' . $script . '?' . $r_page . '" title="' .
+ '<a href="' . $page_uri . '" title="' .
$s_page . ' ' . $passage . '">' . $s_page . '</a>' :
- '<a href="' . $script . '?' . $r_page . '">' .
+ '<a href="' . $page_uri . '">' .
$s_page . '</a>' . $passage;
}
if (empty($_links)) return ''; // Nothing
if ($tag == 'p') { // From the line-head
- $margin = $_ul_left_margin + $_ul_margin;
- $style = sprintf($_list_pad_str, 1, $margin, $margin);
+ $style = sprintf(pkwk_list_attrs_template(), 1, 1);
$retval = "\n" . '<ul' . $style . '>' . "\n" .
'<li>' . join($rule_related_str, $_links) . '</li>' . "\n" .
'</ul>' . "\n";
// Make a backlink. searching-link of the page name, by the page name, for the page name
function make_search($page)
{
- global $script;
-
- $s_page = htmlspecialchars($page);
+ $s_page = htmlsc($page);
$r_page = rawurlencode($page);
-
- return '<a href="' . $script . '?plugin=related&page=' . $r_page .
+ return '<a href="' . get_base_uri() . '?plugin=related&page=' . $r_page .
'">' . $s_page . '</a> ';
}
if (version_compare(PHP_VERSION, '4.3.0', '>=')) {
if (headers_sent($file, $line))
die('Headers already sent at ' .
- htmlspecialchars($file) .
+ htmlsc($file) .
' line ' . $line . '.');
} else {
if (headers_sent())
break;
}
- $charset = htmlspecialchars($charset);
+ $charset = htmlsc($charset);
// Output XML or not
if ($type == PKWK_DTD_TYPE_XHTML) echo '<?xml version="1.0" encoding="' . $charset . '" ?>' . "\n";
return '<meta http-equiv="content-type" content="text/html; charset=' . $charset . '" />' . "\n";
}
}
-?>
+
+/**
+ * Get template of List (ul, ol, dl) attributes
+ */
+function pkwk_list_attrs_template() {
+ return ' class="list%d list-indent%d"';
+}