Cleanup and correct secret 'x*y' view

[pukiwiki/pukiwiki.git] / plugin / back.inc.php

diff --git a/plugin/back.inc.php b/plugin/back.inc.php
index 4c84197..4580f20 100644 (file)
--- a/plugin/back.inc.php
+++ b/plugin/back.inc.php
@@ -1,5 +1,5 @@
 <?php
-// $Id: back.inc.php,v 1.1 2002/12/05 05:02:27 panda Exp $
+// $Id: back.inc.php,v 1.5 2004/07/31 03:09:20 henoheno Exp $
 /*
  * PukiWiki back ¥×¥é¥°¥¤¥ó
  * (C) 2002, Katsumi Saito <katsumi@jo1upk.ymt.prug.or.jp>
@@ -19,10 +19,12 @@
 
 function plugin_back_convert()
 {
+       global $_msg_back_word;
+
        $argv = func_get_args();
 
        // ½é´üÃÍÀßÄê
-       $word  = 'Ìá¤ë';
+       $word  = $_msg_back_word;
        $align = 'center';
        $hr    = 1;
        $href  = 'javascript:history.go(-1)';
@@ -30,27 +32,27 @@ function plugin_back_convert()
 
        // ¥Ñ¥é¥á¡¼¥¿¤ÎȽÃÇ
        if (func_num_args() > 0) {
-               $word = trim(strip_tags($argv[0]));
-               if ($word == '') $word = 'Ìá¤ë';
+               $word = htmlspecialchars(trim(strip_tags($argv[0])));
+               if ($word == '') $word = $_msg_back_word;
        }
        if (func_num_args() > 1) {
-               $align = trim(strip_tags($argv[1]));
+               $align = htmlspecialchars(trim(strip_tags($argv[1])));
                if ($align == '') $align = 'center';
        }
        if (func_num_args() > 2) {
                $hr = trim(strip_tags($argv[2]));
        }
        if (func_num_args() > 3) {
-               $href = trim(strip_tags($argv[3]));
+               $href = rawurlencode(trim(strip_tags($argv[3])));
                if ($href == '') $href = 'javascript:history.go(-1)';
        }
 
        // <hr> ¥¿¥°¤ò½ÐÎϤ¹¤ë¤«¤É¤¦¤«
        if ($hr) {
-               $ret = "<hr class=\"full_hr\">\n";
+               $ret = "<hr class=\"full_hr\" />\n";
        }
 
-       $ret.= "<div align=\"$align\">[ <a href=\"$href\">$word</a> ]</div>\n";
+       $ret.= "<div style=\"text-align:$align\">[ <a href=\"$href\">$word</a> ]</div>\n";
 
        return $ret;
 }