OSDN Git Service

BugTrack2/383 Set Form authentication as default auth method type
[pukiwiki/pukiwiki.git] / plugin / insert.inc.php
index 1d56783..bcf5e52 100644 (file)
-<?
-/////////////////////////////////////////////////
-// ¥Æ¥­¥¹¥È¥¨¥ê¥¢¤Î¥«¥é¥à¿ô
-define("INSERT_COLS",70);
-/////////////////////////////////////////////////
-// ¥Æ¥­¥¹¥È¥¨¥ê¥¢¤Î¹Ô¿ô
-define("INSERT_ROWS",5);
-/////////////////////////////////////////////////
-// ÁÞÆþ¤¹¤ë°ÌÃÖ 1:Íó¤ÎÁ° 0:Íó¤Î¸å
-define("INSERT_INS",1);
+<?php
+// $Id: insert.inc.php,v 1.16 2011/01/25 15:01:01 henoheno Exp $
+//
+// Text inserting box plugin
+
+define('INSERT_COLS', 70); // Columns of textarea
+define('INSERT_ROWS',  5); // Rows of textarea
+define('INSERT_INS',   1); // Order of insertion (1:before the textarea, 0:after)
 
 function plugin_insert_action()
 {
-       global $post,$vars,$script,$cols,$rows,$del_backup,$do_backup;
-       global $_title_collided,$_msg_collided,$_title_updated;
-
-       if($post["msg"])
-       {
-               $postdata = "";
-               $postdata_old  = file(get_filename(encode($post["refer"])));
-               $insert_no = 0;
-
-               if($post[msg])
-               {
-                       $insert = $post[msg];
-               }
+       global $script, $vars, $cols, $rows;
+       global $_title_collided, $_msg_collided, $_title_updated;
 
-               foreach($postdata_old as $line)
-               {
-                       if(!INSERT_INS) $postdata .= $line;
-                       if(preg_match("/^#insert$/",$line))
-                       {
-                               if($insert_no == $post["insert_no"] && $post[msg]!="")
-                               {
-                                       $postdata .= "$insert\n";
-                               }
-                               $insert_no++;
-                       }
-                       if(INSERT_INS) $postdata .= $line;
-               }
+       if (PKWK_READONLY) die_message('PKWK_READONLY prohibits editing');
+       if (! isset($vars['msg']) || $vars['msg'] == '') return;
 
-               $postdata_input = "$insert\n";
-       }
-       else
-               return;
+       $vars['msg'] = preg_replace('/' . "\r" . '/', '', $vars['msg']);
+       $insert = ($vars['msg'] != '') ? "\n" . $vars['msg'] . "\n" : '';
 
-       if(md5(@join("",@file(get_filename(encode($post["refer"]))))) != $post["digest"])
-       {
-               $title = $_title_collided;
+       $postdata = '';
+       $postdata_old  = get_source($vars['refer']);
+       $insert_no = 0;
 
-               $body = "$_msg_collided\n";
 
-               $body .= "<form action=\"$script?cmd=preview\" method=\"post\">\n"
-                       ."<input type=\"hidden\" name=\"refer\" value=\"".$post["refer"]."\">\n"
-                       ."<input type=\"hidden\" name=\"digest\" value=\"".$post["digest"]."\">\n"
-                       ."<textarea name=\"msg\" rows=\"$rows\" cols=\"$cols\" wrap=\"virtual\" id=\"textarea\">$postdata_input</textarea><br>\n"
-                       ."</form>\n";
+       foreach($postdata_old as $line) {
+               if (! INSERT_INS) $postdata .= $line;
+               if (preg_match('/^#insert$/i', $line)) {
+                       if ($insert_no == $vars['insert_no'])
+                               $postdata .= $insert;
+                       $insert_no++;
+               }
+               if (INSERT_INS) $postdata .= $line;
        }
-       else
-       {
-               $postdata = user_rules_str($postdata);
-
-               // º¹Ê¬¥Õ¥¡¥¤¥ë¤ÎºîÀ®
-               if(is_page($post["refer"]))
-                       $oldpostdata = join("",file(get_filename(encode($post["refer"]))));
-               else
-                       $oldpostdata = "\n";
-               if($postdata)
-                       $diffdata = do_diff($oldpostdata,$postdata);
-               file_write(DIFF_DIR,$post["refer"],$diffdata);
-
-               // ¥Ð¥Ã¥¯¥¢¥Ã¥×¤ÎºîÀ®
-               if(is_page($post["refer"]))
-                       $oldposttime = filemtime(get_filename(encode($post["refer"])));
-               else
-                       $oldposttime = time();
-
-               // ÊÔ½¸ÆâÍƤ¬²¿¤â½ñ¤«¤ì¤Æ¤¤¤Ê¤¤¤È¥Ð¥Ã¥¯¥¢¥Ã¥×¤âºï½ü¤¹¤ë?¤·¤Ê¤¤¤Ç¤¹¤è¤Í¡£
-               if(!$postdata && $del_backup)
-                       backup_delete(BACKUP_DIR.encode($post["refer"]).".txt");
-               else if($do_backup && is_page($post["refer"]))
-                       make_backup(encode($post["refer"]).".txt",$oldpostdata,$oldposttime);
-
-               // ¥Õ¥¡¥¤¥ë¤Î½ñ¤­¹þ¤ß
-               file_write(DATA_DIR,$post["refer"],$postdata);
-
-               // is_page¤Î¥­¥ã¥Ã¥·¥å¤ò¥¯¥ê¥¢¤¹¤ë¡£
-               is_page($post["refer"],true);
+
+       $postdata_input = $insert . "\n";
+
+       $body = '';
+       if (md5(get_source($vars['refer'], TRUE, TRUE)) !== $vars['digest']) {
+               $title = $_title_collided;
+               $body  = $_msg_collided . "\n";
+
+               $s_refer          = htmlsc($vars['refer']);
+               $s_digest         = htmlsc($vars['digest']);
+               $s_postdata_input = htmlsc($postdata_input);
+
+               $body .= <<<EOD
+<form action="$script?cmd=preview" method="post">
+ <div>
+  <input type="hidden" name="refer"  value="$s_refer" />
+  <input type="hidden" name="digest" value="$s_digest" />
+  <textarea name="msg" rows="$rows" cols="$cols" id="textarea">$s_postdata_input</textarea><br />
+ </div>
+</form>
+EOD;
+       } else {
+               page_write($vars['refer'], $postdata);
 
                $title = $_title_updated;
        }
-       $retvars["msg"] = $title;
-       $retvars["body"] = $body;
+       $retvars['msg']  = $title;
+       $retvars['body'] = $body;
 
-       $post["page"] = $post["refer"];
-       $vars["page"] = $post["refer"];
+       $vars['page'] = $vars['refer'];
 
        return $retvars;
 }
+
 function plugin_insert_convert()
 {
-       global $script,$insert_no,$vars,$digest;
-       global $_btn_insert,$vars;
-
-       if((arg_check("read")||$vars["cmd"] == ""||arg_check("unfreeze")||arg_check("freeze")||$vars["write"]||$vars["insert"]))
-               $button = "<input type=\"submit\" name=\"insert\" value=\"$_btn_insert\">\n";
-
-       $string = "<form action=\"$script\" method=\"post\">\n"
-                ."<input type=\"hidden\" name=\"insert_no\" value=\"$insert_no\">\n"
-                ."<input type=\"hidden\" name=\"refer\" value=\"$vars[page]\">\n"
-                ."<input type=\"hidden\" name=\"plugin\" value=\"insert\">\n"
-                ."<input type=\"hidden\" name=\"digest\" value=\"$digest\">\n"
-                ."<textarea name=\"msg\" rows=\"".INSERT_ROWS."\" cols=\"".INSERT_COLS."\">\n</textarea><br>\n"
-                .$button
-                ."</form>";
-
-       $insert_no++;
+       global $script, $vars, $digest;
+       global $_btn_insert;
+       static $numbers = array();
+
+       if (PKWK_READONLY) return ''; // Show nothing
+
+       if (! isset($numbers[$vars['page']])) $numbers[$vars['page']] = 0;
+
+       $insert_no = $numbers[$vars['page']]++;
+
+       $s_page   = htmlsc($vars['page']);
+       $s_digest = htmlsc($digest);
+       $s_cols   = INSERT_COLS;
+       $s_rows   = INSERT_ROWS;
+       $string   = <<<EOD
+<form action="$script" method="post">
+ <div>
+  <input type="hidden" name="insert_no" value="$insert_no" />
+  <input type="hidden" name="refer"  value="$s_page" />
+  <input type="hidden" name="plugin" value="insert" />
+  <input type="hidden" name="digest" value="$s_digest" />
+  <textarea name="msg" rows="$s_rows" cols="$s_cols"></textarea><br />
+  <input type="submit" name="insert" value="$_btn_insert" />
+ </div>
+</form>
+EOD;
 
        return $string;
 }