-<?
-// $Id: memo.inc.php,v 1.2 2002/06/26 06:23:57 masui Exp $
+<?php
+// $Id: memo.inc.php,v 1.11 2004/07/24 14:58:41 henoheno Exp $
/////////////////////////////////////////////////
// ¥Æ¥¥¹¥È¥¨¥ê¥¢¤Î¥«¥é¥à¿ô
-define("MEMO_COLS",80);
-/////////////////////////////////////////////////
+define('MEMO_COLS', 80);
+
// ¥Æ¥¥¹¥È¥¨¥ê¥¢¤Î¹Ô¿ô
-define("MEMO_ROWS",5);
+define('MEMO_ROWS', 5);
+/////////////////////////////////////////////////
function plugin_memo_action()
{
- global $post,$vars,$script,$cols,$rows,$del_backup,$do_backup;
- global $_title_collided,$_msg_collided,$_title_updated;
-
- $post["msg"] = preg_replace("/(\x0D\x0A)/","\n",$post["msg"]);
- $post["msg"] = preg_replace("/(\x0D)/","\n",$post["msg"]);
- $post["msg"] = preg_replace("/(\x0A)/","\n",$post["msg"]);
-
- if($post["msg"])
- {
- $post["msg"] = str_replace("\n","\\n",$post["msg"]);
+ global $script, $vars, $cols, $rows;
+ global $_title_collided, $_msg_collided, $_title_updated;
- $postdata = "";
- $postdata_old = file(get_filename(encode($post["refer"])));
- $memo_no = 0;
+ if (! isset($vars['msg']) || $vars['msg'] == '') return;
- $memo_body = $post["msg"];
+ $memo_body = preg_replace("/\r/", '', $vars['msg']);
+ $memo_body = str_replace("\n", "\\n", $memo_body);
+ $memo_body = str_replace('"', '"', $memo_body); // Escape double quotes
+ $memo_body = str_replace(',', ',', $memo_body); // Escape commas
- foreach($postdata_old as $line)
+ $postdata_old = get_source($vars['refer']);
+ $postdata = '';
+ $memo_no = 0;
+ foreach($postdata_old as $line)
+ {
+ if (preg_match("/^#memo\(?.*\)?$/", $line))
{
- if(preg_match("/^#memo\(?.*\)?$/",$line))
+ if ($memo_no == $vars['memo_no'])
{
- if($memo_no == $post["memo_no"] && $post["msg"]!="")
- {
- $postdata .= "#memo($memo_body)\n";
- $line = "";
- }
- $memo_no++;
+ $postdata .= "#memo($memo_body)\n";
+ $line = '';
}
- $postdata .= $line;
+ ++$memo_no;
}
-
- $postdata_input = "$memo_body\n";
+ $postdata .= $line;
}
- else
- return;
-
- if(md5(@join("",@file(get_filename(encode($post["refer"]))))) != $post["digest"])
+
+ $postdata_input = "$memo_body\n";
+
+ if (md5(@join('', get_source($vars['refer']))) != $vars['digest'])
{
$title = $_title_collided;
-
+
$body = "$_msg_collided\n";
- $body .= "<form action=\"$script?cmd=preview\" method=\"post\">\n"
- ."<input type=\"hidden\" name=\"refer\" value=\"".$post["refer"]."\">\n"
- ."<input type=\"hidden\" name=\"digest\" value=\"".$post["digest"]."\">\n"
- ."<textarea name=\"msg\" rows=\"$rows\" cols=\"$cols\" wrap=\"virtual\" id=\"textarea\">$postdata_input</textarea><br>\n"
- ."</form>\n";
+ $s_refer = htmlspecialchars($vars['refer']);
+ $s_digest = htmlspecialchars($vars['digest']);
+ $s_postdata_input = htmlspecialchars($postdata_input);
+
+ $body .= <<<EOD
+<form action="$script?cmd=preview" method="post">
+ <div>
+ <input type="hidden" name="refer" value="$s_refer" />
+ <input type="hidden" name="digest" value="$s_digest" />
+ <textarea name="msg" rows="$rows" cols="$cols" id="textarea">$s_postdata_input</textarea><br />
+ </div>
+</form>
+EOD;
}
else
{
- $postdata = user_rules_str($postdata);
-
- // º¹Ê¬¥Õ¥¡¥¤¥ë¤ÎºîÀ®
- if(is_page($post["refer"]))
- $oldpostdata = join("",file(get_filename(encode($post["refer"]))));
- else
- $oldpostdata = "\n";
- if($postdata)
- $diffdata = do_diff($oldpostdata,$postdata);
- file_write(DIFF_DIR,$post["refer"],$diffdata);
-
- // ¥Ð¥Ã¥¯¥¢¥Ã¥×¤ÎºîÀ®
- if(is_page($post["refer"]))
- $oldposttime = filemtime(get_filename(encode($post["refer"])));
- else
- $oldposttime = time();
-
- // ÊÔ½¸ÆâÍƤ¬²¿¤â½ñ¤«¤ì¤Æ¤¤¤Ê¤¤¤È¥Ð¥Ã¥¯¥¢¥Ã¥×¤âºï½ü¤¹¤ë?¤·¤Ê¤¤¤Ç¤¹¤è¤Í¡£
- if(!$postdata && $del_backup)
- backup_delete(BACKUP_DIR.encode($post["refer"]).".txt");
- else if($do_backup && is_page($post["refer"]))
- make_backup(encode($post["refer"]).".txt",$oldpostdata,$oldposttime);
-
- // ¥Õ¥¡¥¤¥ë¤Î½ñ¤¹þ¤ß
- file_write(DATA_DIR,$post["refer"],$postdata);
-
- // is_page¤Î¥¥ã¥Ã¥·¥å¤ò¥¯¥ê¥¢¤¹¤ë¡£
- is_page($post["refer"],true);
+ page_write($vars['refer'], $postdata);
$title = $_title_updated;
}
- $retvars["msg"] = $title;
- $retvars["body"] = $body;
-
- $post["page"] = $post["refer"];
- $vars["page"] = $post["refer"];
-
+ $retvars['msg'] = $title;
+ $retvars['body'] = $body;
+
+ $vars['page'] = $vars['refer'];
+
return $retvars;
}
+
function plugin_memo_convert()
{
- global $script,$memo_no,$vars,$digest;
- global $_btn_memo_update,$vars;
-
- if(func_num_args())
- $aryargs = func_get_args();
+ global $script, $vars, $digest;
+ global $_btn_memo_update;
+ static $numbers = array();
- $data = str_replace("\\n","\n",$aryargs[0]);
-
- if((arg_check("read")||$vars["cmd"] == ""||arg_check("unfreeze")||arg_check("freeze")||$vars["write"]||$vars["memo"]))
- $button = "<input type=\"submit\" name=\"memo\" value=\"$_btn_memo_update\">\n";
-
- $string = "<form action=\"$script\" method=\"post\" class=\"memo\">\n"
- ."<input type=\"hidden\" name=\"memo_no\" value=\"$memo_no\">\n"
- ."<input type=\"hidden\" name=\"refer\" value=\"$vars[page]\">\n"
- ."<input type=\"hidden\" name=\"plugin\" value=\"memo\">\n"
- ."<input type=\"hidden\" name=\"digest\" value=\"$digest\">\n"
- ."<textarea name=\"msg\" rows=\"".MEMO_ROWS."\" cols=\"".MEMO_COLS."\">\n$data</textarea><br>\n"
- .$button
- ."</form>";
-
- $memo_no++;
+ if (! isset($numbers[$vars['page']]))
+ {
+ $numbers[$vars['page']] = 0;
+ }
+ $memo_no = $numbers[$vars['page']]++;
+
+ $data = func_get_args();
+ $data = implode(',', $data); // Care all arguments
+ $data = str_replace(',', ',', $data); // Unescape commas
+ $data = str_replace('"', '"', $data); // Unescape double quotes
+ $data = htmlspecialchars(str_replace("\\n", "\n", $data));
+
+ $s_page = htmlspecialchars($vars['page']);
+ $s_digest = htmlspecialchars($digest);
+ $s_cols = MEMO_COLS;
+ $s_rows = MEMO_ROWS;
+ $string = <<<EOD
+<form action="$script" method="post" class="memo">
+ <div>
+ <input type="hidden" name="memo_no" value="$memo_no" />
+ <input type="hidden" name="refer" value="$s_page" />
+ <input type="hidden" name="plugin" value="memo" />
+ <input type="hidden" name="digest" value="$s_digest" />
+ <textarea name="msg" rows="$s_rows" cols="$s_cols">$data</textarea><br />
+ <input type="submit" name="memo" value="$_btn_memo_update" />
+ </div>
+</form>
+EOD;
return $string;
}