OSDN Git Service

BugTrack2/372 Add auth group - set of multi users on page permission
[pukiwiki/pukiwiki.git] / plugin / memo.inc.php
index c5fe600..cba06c2 100644 (file)
 <?php
-// $Id: memo.inc.php,v 1.5 2002/12/19 11:33:49 panda Exp $
+// $Id: memo.inc.php,v 1.17 2011/01/25 15:01:01 henoheno Exp $
+//
+// Memo box plugin
 
-/////////////////////////////////////////////////
-// ¥Æ¥­¥¹¥È¥¨¥ê¥¢¤Î¥«¥é¥à¿ô
-define("MEMO_COLS",80);
-/////////////////////////////////////////////////
-// ¥Æ¥­¥¹¥È¥¨¥ê¥¢¤Î¹Ô¿ô
-define("MEMO_ROWS",5);
+define('MEMO_COLS', 60); // Columns of textarea
+define('MEMO_ROWS',  5); // Rows of textarea
 
 function plugin_memo_action()
 {
-       global $post,$vars,$script,$cols,$rows,$del_backup,$do_backup;
-       global $_title_collided,$_msg_collided,$_title_updated;
-
-       $post["msg"] = preg_replace("/(\x0D\x0A)/","\n",$post["msg"]);
-       $post["msg"] = preg_replace("/(\x0D)/","\n",$post["msg"]);
-       $post["msg"] = preg_replace("/(\x0A)/","\n",$post["msg"]);
-
-       if($post["msg"])
-       {
-               $post["msg"] = str_replace("\n","\\n",$post["msg"]);
-
-               $postdata = "";
-               $postdata_old  = file(get_filename(encode($post["refer"])));
-               $memo_no = 0;
-
-               $memo_body = $post["msg"];
-
-               foreach($postdata_old as $line)
-               {
-                       if(preg_match("/^#memo\(?.*\)?$/",$line))
-                       {
-                               if($memo_no == $post["memo_no"] && $post["msg"]!="")
-                               {
-                                       $postdata .= "#memo($memo_body)\n";
-                                       $line = "";
-                               }
-                               $memo_no++;
+       global $script, $vars, $cols, $rows;
+       global $_title_collided, $_msg_collided, $_title_updated;
+
+       if (PKWK_READONLY) die_message('PKWK_READONLY prohibits editing');
+       if (! isset($vars['msg']) || $vars['msg'] == '') return;
+
+       $memo_body = preg_replace('/' . "\r" . '/', '', $vars['msg']);
+       $memo_body = str_replace("\n", '\n', $memo_body);
+       $memo_body = str_replace('"', '&#x22;', $memo_body); // Escape double quotes
+       $memo_body = str_replace(',', '&#x2c;', $memo_body); // Escape commas
+
+       $postdata_old  = get_source($vars['refer']);
+       $postdata = '';
+       $memo_no = 0;
+       foreach($postdata_old as $line) {
+               if (preg_match("/^#memo\(?.*\)?$/i", $line)) {
+                       if ($memo_no == $vars['memo_no']) {
+                               $postdata .= '#memo(' . $memo_body . ')' . "\n";
+                               $line = '';
                        }
-                       $postdata .= $line;
+                       ++$memo_no;
                }
-
-               $postdata_input = "$memo_body\n";
+               $postdata .= $line;
        }
-       else
-               return;
-       
-       if(md5(@join("",@file(get_filename(encode($post["refer"]))))) != $post["digest"])
-       {
+
+       $postdata_input = $memo_body . "\n";
+
+       $body = '';
+       if (md5(get_source($vars['refer'], TRUE, TRUE)) !== $vars['digest']) {
                $title = $_title_collided;
-               
-               $body = "$_msg_collided\n";
-
-               $body .= "<form action=\"$script?cmd=preview\" method=\"post\">\n"
-                       ."<div>\n"
-                       ."<input type=\"hidden\" name=\"refer\" value=\"".$post["refer"]."\" />\n"
-                       ."<input type=\"hidden\" name=\"digest\" value=\"".$post["digest"]."\" />\n"
-                       ."<textarea name=\"msg\" rows=\"$rows\" cols=\"$cols\" wrap=\"virtual\" id=\"textarea\">$postdata_input</textarea><br />\n"
-                       ."</div>\n"
-                       ."</form>\n";
-       }
-       else
-       {
-               $postdata = user_rules_str($postdata);
-
-               // º¹Ê¬¥Õ¥¡¥¤¥ë¤ÎºîÀ®
-               if(is_page($post["refer"]))
-                       $oldpostdata = join("",file(get_filename(encode($post["refer"]))));
-               else
-                       $oldpostdata = "\n";
-               if($postdata)
-                       $diffdata = do_diff($oldpostdata,$postdata);
-               file_write(DIFF_DIR,$post["refer"],$diffdata);
-
-               // ¥Ð¥Ã¥¯¥¢¥Ã¥×¤ÎºîÀ®
-               if(is_page($post["refer"]))
-                       $oldposttime = filemtime(get_filename(encode($post["refer"])));
-               else
-                       $oldposttime = time();
-
-               // ÊÔ½¸ÆâÍƤ¬²¿¤â½ñ¤«¤ì¤Æ¤¤¤Ê¤¤¤È¥Ð¥Ã¥¯¥¢¥Ã¥×¤âºï½ü¤¹¤ë?¤·¤Ê¤¤¤Ç¤¹¤è¤Í¡£
-               if(!$postdata && $del_backup)
-                       backup_delete(BACKUP_DIR.encode($post["refer"]).".txt");
-               else if($do_backup && is_page($post["refer"]))
-                       make_backup(encode($post["refer"]).".txt",$oldpostdata,$oldposttime);
-
-               // ¥Õ¥¡¥¤¥ë¤Î½ñ¤­¹þ¤ß
-               file_write(DATA_DIR,$post["refer"],$postdata);
-
-               // is_page¤Î¥­¥ã¥Ã¥·¥å¤ò¥¯¥ê¥¢¤¹¤ë¡£
-               is_page($post["refer"],true);
+               $body  = $_msg_collided . "\n";
+
+               $s_refer          = htmlsc($vars['refer']);
+               $s_digest         = htmlsc($vars['digest']);
+               $s_postdata_input = htmlsc($postdata_input);
+
+               $body .= <<<EOD
+<form action="$script?cmd=preview" method="post">
+ <div>
+  <input type="hidden" name="refer"  value="$s_refer" />
+  <input type="hidden" name="digest" value="$s_digest" />
+  <textarea name="msg" rows="$rows" cols="$cols" id="textarea">$s_postdata_input</textarea><br />
+ </div>
+</form>
+EOD;
+       } else {
+               page_write($vars['refer'], $postdata);
 
                $title = $_title_updated;
        }
-       $retvars["msg"] = $title;
-       $retvars["body"] = $body;
-       
-       $post["page"] = $post["refer"];
-       $vars["page"] = $post["refer"];
-       
+       $retvars['msg']  = & $title;
+       $retvars['body'] = & $body;
+
+       $vars['page'] = $vars['refer'];
+
        return $retvars;
 }
+
 function plugin_memo_convert()
 {
-       global $script,$vars,$digest;
-       global $_btn_memo_update,$vars;
-       static $memo_no = 0;
-
-       if(func_num_args())
-               $aryargs = func_get_args();
-
-       $data = str_replace("\\n","\n",$aryargs[0]);
-
-       if((arg_check("read")||$vars["cmd"] == ""||arg_check("unfreeze")||arg_check("freeze")||$vars["write"]||$vars["memo"]))
-               $button = "<input type=\"submit\" name=\"memo\" value=\"$_btn_memo_update\" />\n";
-
-       $s_page = htmlspecialchars($vars['page']);
-       
-       $string = "<form action=\"$script\" method=\"post\" class=\"memo\">\n"
-                ."<div>\n"
-                ."<input type=\"hidden\" name=\"memo_no\" value=\"$memo_no\" />\n"
-                ."<input type=\"hidden\" name=\"refer\" value=\"$s_page\" />\n"
-                ."<input type=\"hidden\" name=\"plugin\" value=\"memo\" />\n"
-                ."<input type=\"hidden\" name=\"digest\" value=\"$digest\" />\n"
-                ."<textarea name=\"msg\" rows=\"".MEMO_ROWS."\" cols=\"".MEMO_COLS."\">\n$data</textarea><br />\n"
-                .$button
-                ."</div>\n"
-                ."</form>";
-
-       $memo_no++;
+       global $script, $vars, $digest;
+       global $_btn_memo_update;
+       static $numbers = array();
+
+       if (! isset($numbers[$vars['page']])) $numbers[$vars['page']] = 0;
+       $memo_no = $numbers[$vars['page']]++;
+
+       $data = func_get_args();
+       $data = implode(',', $data);    // Care all arguments
+       $data = str_replace('&#x2c;', ',', $data); // Unescape commas
+       $data = str_replace('&#x22;', '"', $data); // Unescape double quotes
+       $data = htmlsc(str_replace('\n', "\n", $data));
+
+       if (PKWK_READONLY) {
+               $_script = '';
+               $_submit = '';  
+       } else {
+               $_script = & $script;
+               $_submit = '<input type="submit" name="memo"    value="' . $_btn_memo_update . '" />';
+       }
+
+       $s_page   = htmlsc($vars['page']);
+       $s_digest = htmlsc($digest);
+       $s_cols   = MEMO_COLS;
+       $s_rows   = MEMO_ROWS;
+       $string   = <<<EOD
+<form action="$_script" method="post" class="memo">
+ <div>
+  <input type="hidden" name="memo_no" value="$memo_no" />
+  <input type="hidden" name="refer"   value="$s_page" />
+  <input type="hidden" name="plugin"  value="memo" />
+  <input type="hidden" name="digest"  value="$s_digest" />
+  <textarea name="msg" rows="$s_rows" cols="$s_cols">$data</textarea><br />
+  $_submit
+ </div>
+</form>
+EOD;
 
        return $string;
 }