'attach.inc.php not found or not correct version.');
}
$retval = attach_upload($file,$vars['refer'],TRUE);
if ($retval['result'] == TRUE)
{
$retval = paint_insert_ref($file['name']);
}
}
else
{
$message = '';
$r_refer = $s_refer = '';
if (array_key_exists('refer',$vars))
{
$r_refer = pagename_urlencode($vars['refer']);
$s_refer = htmlsc($vars['refer']);
}
$link = "$s_refer
";;
$w = PAINT_APPLET_WIDTH;
$h = PAINT_APPLET_HEIGHT;
//ウインドウモード :)
if ($w < 50 and $h < 50)
{
$w = $h = 0;
$retval['msg'] = '';
$vars['page'] = $vars['refer'];
$vars['cmd'] = 'read';
$retval['body'] = convert_html(get_source($vars['refer']));
$link = '';
}
//XSS脆弱性問題 - 外部から来た変数をエスケープ
$width = empty($vars['width']) ? PAINT_DEFAULT_WIDTH : $vars['width'];
$height = empty($vars['height']) ? PAINT_DEFAULT_HEIGHT : $vars['height'];
$f_w = (is_numeric($width) and $width > 0) ? $width : PAINT_DEFAULT_WIDTH;
$f_h = (is_numeric($height) and $height > 0) ? $height : PAINT_DEFAULT_HEIGHT;
$f_refer = array_key_exists('refer',$vars) ? encode($vars['refer']) : ''; // BBSPainter.jarがshift-jisに変換するのを回避
$f_digest = array_key_exists('digest',$vars) ? htmlsc($vars['digest']) : '';
$f_no = (array_key_exists('paint_no',$vars) and is_numeric($vars['paint_no'])) ?
$vars['paint_no'] + 0 : 0;
if ($f_w > PAINT_MAX_WIDTH)
{
$f_w = PAINT_MAX_WIDTH;
}
if ($f_h > PAINT_MAX_HEIGHT)
{
$f_h = PAINT_MAX_HEIGHT;
}
$retval['body'] .= <<
$link
$message
EOD;
// XHTML 1.0 Transitional
if (! isset($pkwk_dtd) || $pkwk_dtd == PKWK_DTD_XHTML_1_1)
$pkwk_dtd = PKWK_DTD_XHTML_1_0_TRANSITIONAL;
}
return $retval;
}
function plugin_paint_convert()
{
global $script,$vars,$digest;
global $_paint_messages;
static $numbers = array();
if (PKWK_READONLY) return ''; // Show nothing
if (!array_key_exists($vars['page'],$numbers))
{
$numbers[$vars['page']] = 0;
}
$paint_no = $numbers[$vars['page']]++;
//戻り値
$ret = '';
//文字列を取得
$width = $height = 0;
$args = func_get_args();
if (count($args) >= 2)
{
$width = array_shift($args);
$height = array_shift($args);
}
if (!is_numeric($width) or $width <= 0)
{
$width = PAINT_DEFAULT_WIDTH;
}
if (!is_numeric($height) or $height <= 0)
{
$height = PAINT_DEFAULT_HEIGHT;
}
//XSS脆弱性問題 - 外部から来た変数をエスケープ
$f_page = htmlsc($vars['page']);
$max = sprintf($_paint_messages['msg_max'],PAINT_MAX_WIDTH,PAINT_MAX_HEIGHT);
$ret = <<
x
$max
EOD;
return $ret;
}
function paint_insert_ref($filename)
{
global $script,$vars,$now,$do_backup;
global $_paint_messages,$_no_name;
$ret['msg'] = $_paint_messages['msg_title'];
$msg = mb_convert_encoding(rtrim($vars['msg']),SOURCE_ENCODING,'auto');
$name = mb_convert_encoding($vars['yourname'],SOURCE_ENCODING,'auto');
$msg = str_replace('$msg',$msg,PAINT_MSG_FORMAT);
$name = ($name == '') ? $_no_name : $vars['yourname'];
$name = ($name == '') ? '' : str_replace('$name',$name,PAINT_NAME_FORMAT);
$now = str_replace('$now',$now,PAINT_NOW_FORMAT);
$msg = trim($msg);
$msg = ($msg == '') ?
PAINT_FORMAT_NOMSG :
str_replace("\x08MSG\x08", $msg, PAINT_FORMAT);
$msg = str_replace("\x08NAME\x08",$name, $msg);
$msg = str_replace("\x08NOW\x08",$now, $msg);
//ブロックに食われないように、#clearの直前に\nを2個書いておく
$msg = "#ref($filename,wrap,around)\n" . trim($msg) . "\n\n" .
"#clear\n";
$postdata_old = get_source($vars['refer']);
$postdata = '';
$paint_no = 0; //'#paint'の出現回数
foreach ($postdata_old as $line)
{
if (!PAINT_INSERT_INS)
{
$postdata .= $line;
}
if (preg_match('/^#paint/i',$line))
{
if ($paint_no == $vars['paint_no'])
{
$postdata .= $msg;
}
$paint_no++;
}
if (PAINT_INSERT_INS)
{
$postdata .= $line;
}
}
// 更新の衝突を検出
if (md5(join('',$postdata_old)) !== $vars['digest'])
{
$ret['msg'] = $_paint_messages['msg_title_collided'];
$ret['body'] = $_paint_messages['msg_collided'];
}
page_write($vars['refer'],$postdata);
return $ret;
}