OSDN Git Service

BugTrack/231:fix XSS vulnerability.
[pukiwiki/pukiwiki.git] / plugin / bugtrack.inc.php
1 <?php
2 /*
3  * PukiWiki BugTrack¥×¥é¥°¥¤¥ó
4  *
5  * CopyRight 2002 Y.MASUI GPL2
6  * http://masui.net/pukiwiki/ masui@masui.net
7  * 
8  * Êѹ¹ÍúÎò:
9  *  2002.06.17: ºî¤ê»Ï¤á
10  *
11  * $Id: bugtrack.inc.php,v 1.10 2003/02/28 06:19:59 panda Exp $
12  */
13
14 function plugin_bugtrack_init()
15 {
16         $messages = array(
17                 '_bugtrack_plugin_priority_list' => array('¶ÛµÞ','½ÅÍ×','ÉáÄÌ','Äã'),
18                 '_bugtrack_plugin_state_list' => array('Äó°Æ','Ãå¼ê','CVSÂÔ¤Á','´°Î»','ÊÝα','µÑ²¼'),
19                 '_bugtrack_plugin_state_sort' => array('Ãå¼ê','CVSÂÔ¤Á','ÊÝα','´°Î»','Äó°Æ','µÑ²¼'),
20                 '_bugtrack_plugin_state_bgcolor' => array('#ccccff','#ffcc99','#ccddcc','#ccffcc','#ffccff','#cccccc','#ff3333'),
21                 
22                 '_bugtrack_plugin_title' => '$1 Bugtrack Plugin',
23                 '_bugtrack_plugin_base' => '¥Ú¡¼¥¸',
24                 '_bugtrack_plugin_summary' => '¥µ¥Þ¥ê',
25                 '_bugtrack_plugin_priority' => 'Í¥Àè½ç°Ì',
26                 '_bugtrack_plugin_state' => '¾õÂÖ',
27                 '_bugtrack_plugin_name' => 'Åê¹Æ¼Ô',
28                 '_bugtrack_plugin_date' => 'Åê¹ÆÆü',
29                 '_bugtrack_plugin_body' => '¥á¥Ã¥»¡¼¥¸',
30                 '_bugtrack_plugin_category' => '¥«¥Æ¥´¥ê¡¼',
31                 '_bugtrack_plugin_pagename' => '¥Ú¡¼¥¸Ì¾',
32                 '_bugtrack_plugin_pagename_comment' => '<small>¶õÍó¤Î¤Þ¤Þ¤À¤È¼«Æ°Åª¤Ë¥Ú¡¼¥¸Ì¾¤¬¿¶¤é¤ì¤Þ¤¹¡£</small>',
33                 '_bugtrack_plugin_version_comment' => '<small>¶õÍó¤Ç¤â¹½¤¤¤Þ¤»¤ó</small>',
34                 '_bugtrack_plugin_version' => '¥Ð¡¼¥¸¥ç¥ó',
35                 '_bugtrack_plugin_submit' => 'ÄɲÃ'
36                 );
37         set_plugin_messages($messages);
38 }
39
40 function plugin_bugtrack_action()
41 {
42         global $script,$post,$vars,$_bugtrack_plugin_title;
43         
44         if ($post['mode'] == 'submit') {
45                 $page = plugin_bugtrack_write($post['base'], $post['pagename'], $post['summary'], $post['name'], $post['priority'], $post['state'], $post['category'], $post['version'], $post['body']);
46                 header("Location: $script?".rawurlencode($page));
47                 die;
48         }
49         else {
50                 $ret['msg'] = $_bugtrack_plugin_title;
51                 $ret["body"] = plugin_bugtrack_print_form($vars['category']);
52         }
53         
54         return $ret;
55 }
56
57 function plugin_bugtrack_print_form($base,$category)
58 {
59         global $_bugtrack_plugin_priority_list,$_bugtrack_plugin_state_list;
60         global $_bugtrack_plugin_priority, $_bugtrack_plugin_state, $_bugtrack_plugin_name;
61         global $_bugtrack_plugin_date, $_bugtrack_plugin_category, $_bugtrack_plugin_body;
62         global $_bugtrack_plugin_summary, $_bugtrack_plugin_submit, $_bugtrack_plugin_version;
63         global $_bugtrack_plugin_pagename, $_bugtrack_plugin_pagename_comment;
64         global $_bugtrack_plugin_version_comment;
65         global $script;
66
67         $select_priority = '';
68         for ($i = 0; $i < count($_bugtrack_plugin_priority_list); ++$i) {
69                 if ($i < count($_bugtrack_plugin_priority_list) - 1) {
70                         $selected = '';
71                 }
72                 else {
73                         $selected = ' selected="selected"';
74                 }
75                 $select_priority .= "<option value=\"{$_bugtrack_plugin_priority_list[$i]}\"$selected>{$_bugtrack_plugin_priority_list[$i]}</option>\n";
76         }
77         
78         $select_state = '';
79         for ($i = 0; $i < count($_bugtrack_plugin_state_list); ++$i) {
80                 $select_state .= "<option value=\"{$_bugtrack_plugin_state_list[$i]}\">{$_bugtrack_plugin_state_list[$i]}</option>\n";
81         }
82         
83         if (count($category) == 0) {
84                 $encoded_category = '<input name="category" type="text" />';
85         }
86         else {
87                 $encoded_category = '<select name="category">';
88                 foreach ($category as $_category) {
89                         $s_category = htmlspecialchars($_category);
90                         $encoded_category .= "<option value=\"$s_category\">$s_category</option>\n";
91                 }
92                 $encoded_category .= '</select>';
93         }
94         
95         $body = <<<EOD
96 <form action="$script" method="post">
97  <table border="0">
98   <tr>
99    <th>$_bugtrack_plugin_name</th>
100    <td><input name="name" size="20" type="text" /></td>
101   </tr>
102   <tr>
103    <th>$_bugtrack_plugin_category</th>
104    <td>$encoded_category</td>
105   </tr>
106   <tr>
107    <th>$_bugtrack_plugin_priority</th>
108    <td><select name="priority">$select_priority</select></td>
109   </tr>
110   <tr>
111    <th>$_bugtrack_plugin_state</th>
112    <td><select name="state">$select_state</select></td>
113   </tr>
114   <tr>
115    <th>$_bugtrack_plugin_pagename</th>
116    <td><input name="pagename" size="20" type="text" />$_bugtrack_plugin_pagename_comment</td>
117   </tr>
118   <tr>
119    <th>$_bugtrack_plugin_version</th>
120    <td><input name="version" size="10" type="text" />$_bugtrack_plugin_version_comment</td>
121   </tr>
122   <tr>
123    <th>$_bugtrack_plugin_summary</th>
124    <td><input name="summary" size="60" type="text" /></td>
125   </tr>
126   <tr>
127    <th>$_bugtrack_plugin_body</th>
128    <td><textarea name="body" cols="60" rows="6"></textarea></td>
129   </tr>
130   <tr>
131    <td colspan="2" align="center">
132     <input type="submit" value="$_bugtrack_plugin_submit" />
133     <input type="hidden" name="plugin" value="bugtrack" />
134     <input type="hidden" name="mode" value="submit" />
135     <input type="hidden" name="base" value="$base" />
136    </td>
137   </tr>
138  </table>
139 </form>
140 EOD;
141         
142         return $body;
143 }
144
145 function plugin_bugtrack_template($base, $summary, $name, $priority, $state, $category, $version, $body)
146 {
147         global $_bugtrack_plugin_priority, $_bugtrack_plugin_state, $_bugtrack_plugin_name;
148         global $_bugtrack_plugin_date, $_bugtrack_plugin_category, $_bugtrack_plugin_base;
149         global $_bugtrack_plugin_body, $_bugtrack_plugin_version;
150         global $script, $WikiName;
151         
152         if (!preg_match("/^$WikiName$$/",$name)) {
153                 $name = "[[$name]]";
154         }
155         
156         if (!preg_match("/^$WikiName$$/",$base)) {
157                 $base = "[[$base]]";
158         }
159          return <<<EOD
160 *$summary
161
162 -$_bugtrack_plugin_base: $base
163 -$_bugtrack_plugin_name: $name
164 -$_bugtrack_plugin_priority: $priority
165 -$_bugtrack_plugin_state: $state
166 -$_bugtrack_plugin_category: $category
167 -$_bugtrack_plugin_date: now?
168 -$_bugtrack_plugin_version: $version
169
170 **$_bugtrack_plugin_body
171 $body
172 ----
173
174 #comment
175 EOD;
176 }
177
178 function plugin_bugtrack_write($base, $pagename, $summary, $name, $priority, $state, $category, $version, $body)
179 {
180         global $post;
181         
182         $base = strip_bracket($base);
183         $pagename = strip_bracket($pagename);
184         
185         $postdata = plugin_bugtrack_template($base, $summary, $name, $priority, $state, $category, $version, $body);
186
187         $i = 0;
188         do {
189                 $i++;
190                 $page = "$base/$i";
191         } while (is_page($page));
192         
193         if ($pagename == '') {
194                 page_write($page,$postdata);
195         }
196         else {
197                 $pagename = get_fullname($pagename,$base);
198                 // ¤¹¤Ç¤Ë¥Ú¡¼¥¸¤¬Â¸ºß¤¹¤ë¤«¡¢Ìµ¸ú¤Ê¥Ú¡¼¥¸Ì¾¤¬»ØÄꤵ¤ì¤¿
199                 if (is_page($pagename) or !is_pagename($pagename)) {
200                         // ¥Ú¡¼¥¸Ì¾¤ò¥Ç¥Õ¥©¥ë¥È¤ËÌ᤹
201                         $pagename = $page;
202                 }
203                 else {
204                         page_write($page,"move to [[$pagename]]");
205                 }
206                 page_write($pagename,$postdata);
207         }
208
209         return $page;
210 }
211
212 function plugin_bugtrack_convert()
213 {
214         global $vars;
215         
216         $base = $vars['page'];
217         $category = array();
218         if (func_num_args() > 0) {
219                 $args = func_get_args();
220                 $category = $args;
221                 $_base = strip_bracket(array_shift($category));
222                 $_base = get_fullname($_base,$base);
223                 if (is_pagename($_base))
224                 {
225                         $base = $_base;
226                 }
227         }
228         
229         return plugin_bugtrack_print_form($base,$category);
230 }
231
232
233 function plugin_bugtrack_pageinfo($page,$no = NULL)
234 {
235         global $WikiName, $InterWikiName, $BracketName;
236         
237         if ($no === NULL) {
238                 $no = preg_match('/\/([0-9]+)$/',$page,$matches) ? $matches[1] : 0;
239         }
240         
241         $source = get_source($page);
242         if (preg_match("/move\s*to\s*($WikiName|$InterWikiName|\[\[$BracketName\]\])/",$source[0],$match)) {
243                 return plugin_bugtrack_pageinfo(strip_bracket($match[1]),$no);
244         }
245         
246         $body = join("\n",$source);
247         $summary = $name = $priority = $state = $category = 'test';
248         $itemlist = array();
249         foreach(array('summary','name','priority','state','category') as $item) {
250                 $itemname = '_bugtrack_plugin_'.$item;
251                 global $$itemname;
252                 $itemname = $$itemname;
253                 if (preg_match("/-\s*$itemname\s*:\s*(.*)\s*/",$body,$matches)) {
254                         if ($item == 'name') {
255                                 $$item = htmlspecialchars(strip_bracket($matches[1]));
256                         }
257                         else {
258                                 $$item = htmlspecialchars($matches[1]);
259                         }
260                 }
261         }
262         
263         global $_bugtrack_plugin_summary;
264         if (preg_match("/\*([^\n]+)/",$body,$matches)) {
265                 $summary = htmlspecialchars($matches[1]);
266         }
267         
268         return array($page, $no, $summary, $name, $priority, $state, $category);
269 }
270
271 function plugin_bugtrack_list_convert()
272 {
273         global $script,$vars;
274         global $_bugtrack_plugin_priority, $_bugtrack_plugin_state, $_bugtrack_plugin_name;
275         global $_bugtrack_plugin_date, $_bugtrack_plugin_category, $_bugtrack_plugin_summary;
276         global $_bugtrack_plugin_state_sort,$_bugtrack_plugin_state_list,$_bugtrack_plugin_state_bgcolor;
277         
278         $page = $vars['page'];
279         if (func_num_args()) {
280                 list($_page) = func_get_args();
281                 $_page = get_fullname(strip_bracket($_page),$page);
282                 if (is_pagename($_page))
283                 {
284                         $page = $_page;
285                 }
286         }
287         
288         $data = array();
289         $pattern = "$page/";
290         $pattern_len = strlen($pattern);
291         foreach (get_existpages() as $page) {
292                 if (strpos($page,$pattern) === 0 and is_numeric(substr($page,$pattern_len))) {
293                         $line = plugin_bugtrack_pageinfo($page);
294                         array_push($data,$line);
295                 }
296         }
297         
298         $table = array();
299         for ($i = 0; $i <= count($_bugtrack_plugin_state_list) + 1; ++$i) {
300                 $table[$i] = array();
301         }
302         
303         foreach ($data as $line) {
304                 list($page, $no, $summary, $name, $priority, $state, $category) = $line;
305                 $page_link = make_link("[[$page]]");
306                 $state_no = array_search($state,$_bugtrack_plugin_state_sort);
307                 if ($state_no === NULL) {
308                         $state_no = count($_bugtrack_plugin_state_list);
309                 }
310                 
311                 $bgcolor = $_bugtrack_plugin_state_bgcolor[$state_no];
312                 $row = <<<EOD
313  <tr>
314   <td style="background-color:$bgcolor">$page_link</td>
315   <td style="background-color:$bgcolor">$state</td>
316   <td style="background-color:$bgcolor">$priority</td>
317   <td style="background-color:$bgcolor">$category</td>
318   <td style="background-color:$bgcolor">$name</td>
319   <td style="background-color:$bgcolor">$summary</td>
320  </tr>
321 EOD;
322                 $table[$state_no][$no] = $row;
323         }
324         $table_html = <<<EOD
325  <tr>
326   <th>&nbsp;</th>
327   <th>$_bugtrack_plugin_state</th>
328   <th>$_bugtrack_plugin_priority</th>
329   <th>$_bugtrack_plugin_category</th>
330   <th>$_bugtrack_plugin_name</th>
331   <th>$_bugtrack_plugin_summary</th>
332  </tr>
333 EOD;
334         for ($i = 0; $i <= count($_bugtrack_plugin_state_list); ++$i) {
335                 ksort($table[$i],SORT_NUMERIC);
336                 $table_html .= join("\n",$table[$i]);
337         }
338         
339         return "<table border=\"1\">\n$table_html</table>";
340 }
341 ?>