BugTrack/2513 Bold style Table cell (BOLD:...)

[pukiwiki/pukiwiki.git] / plugin / freeze.inc.php

diff --git a/plugin/freeze.inc.php b/plugin/freeze.inc.php
index 8cd1079..a4f2e83 100644 (file)
--- a/plugin/freeze.inc.php
+++ b/plugin/freeze.inc.php
@@ -1,66 +1,62 @@
 <?php
-/////////////////////////////////////////////////
 // PukiWiki - Yet another WikiWikiWeb clone.
+// freeze.inc.php
+// Copyright 2003-2017 PukiWiki Development Team
+// License: GPL v2 or (at your option) any later version
 //
-// $Id: freeze.inc.php,v 1.1 2003/01/27 05:38:46 panda Exp $
-//
-// Åà·ë
+// Freeze(Lock) plugin
+
+// Reserve 'Do nothing'. '^#freeze' is for internal use only.
+function plugin_freeze_convert() { return ''; }
+
 function plugin_freeze_action()
 {
-       global $script,$post,$vars,$function_freeze,$adminpass;
-       global $_title_isfreezed,$_title_freezed,$_title_freeze,$_msg_invalidpass,$_msg_freezing,$_btn_freeze;
-       
+       global $vars, $function_freeze;
+       global $_title_isfreezed, $_title_freezed, $_title_freeze;
+       global $_msg_invalidpass, $_msg_freezing, $_btn_freeze;
+
+       $script = get_base_uri();
+       $page = isset($vars['page']) ? $vars['page'] : '';
+       if (! $function_freeze || ! is_page($page))
+               return array('msg' => '', 'body' => '');
+
+       $pass = isset($vars['pass']) ? $vars['pass'] : NULL;
        $msg = $body = '';
-       
-       if (!$function_freeze or !is_page($vars['page']))
-               return array('msg'=>$msg,'body'=>$body);
-       
-       $pass = array_key_exists('pass',$post) ? $post['pass'] : NULL;
-       
-       if (is_freeze($vars['page']))
-       {
-               $msg = $_title_isfreezed;
-               $body = str_replace('$1',htmlspecialchars(strip_bracket($vars['page'])),$_title_isfreezed);
-       }
-       else if (md5($pass) == $adminpass)
-       {
-               $postdata = get_source($post['page']);
-               array_unshift($postdata,"#freeze\n");
-               $postdata = join('',$postdata);
-               
-               $file = get_filename($vars['page']);
-               $time = get_filetime($vars['page']);
-               file_write(DATA_DIR,$vars['page'],$postdata);
-               touch($file,$time + LOCALZONE);
-               
+       if (is_freeze($page)) {
+               // Freezed already
+               $msg  = & $_title_isfreezed;
+               $body = str_replace('$1', htmlsc(strip_bracket($page)),
+                       $_title_isfreezed);
+
+       } else if ($pass !== NULL && pkwk_login($pass)) {
+               // Freeze
+               $postdata = get_source($page);
+               array_unshift($postdata, "#freeze\n");
+               file_write(DATA_DIR, $page, join('', $postdata), TRUE);
+
+               // Update
+               is_freeze($page, TRUE);
                $vars['cmd'] = 'read';
-               $msg = $_title_freezed;
+               $msg  = & $_title_freezed;
                $body = '';
-       }
-       else
-       {
-               $msg = $_title_freeze;
 
-               $body = "<br />\n";
-               
-               if ($pass !== NULL)
-                       $body .= "<strong>$_msg_invalidpass</strong><br />\n";
-               
-               $body.= "$_msg_freezing<br />\n";
-               
-               $s_page = htmlspecialchars($vars['page']);
-               $body .= <<<EOD
+       } else {
+               // Show a freeze form
+               $msg    = & $_title_freeze;
+               $s_page = htmlsc($page);
+               $body   = ($pass === NULL) ? '' : "<p><strong>$_msg_invalidpass</strong></p>\n";
+               $body  .= <<<EOD
+<p>$_msg_freezing</p>
 <form action="$script" method="post">
  <div>
-  <input type="hidden" name="cmd" value="freeze" />
-  <input type="hidden" name="page" value="$s_page" />
+  <input type="hidden"   name="cmd"  value="freeze" />
+  <input type="hidden"   name="page" value="$s_page" />
   <input type="password" name="pass" size="12" />
-  <input type="submit" name="ok" value="$_btn_freeze" />
+  <input type="submit"   name="ok"   value="$_btn_freeze" />
  </div>
 </form>
 EOD;
        }
-       
-       return array('msg'=>$msg,'body'=>$body);
+
+       return array('msg'=>$msg, 'body'=>$body);
 }
-?>