<div class="page">
<?php
// various minor changes to prevent NOTICES (due to uninitialized variables) - JW 2005-06-07
// added type="text/javascript" to script elements (valid XHTML) - JW 2005-07-01
if (!
(preg_match("/^[A-Za-zÄÖÜßäöü]+[A-Za-z0-9ÄÖÜßäöü]*$/s",
$this->
tag))) { echo '<em>The page name is invalid. Valid page names must start with a letter and contain only letters and numbers.</em>';
}
elseif ($this->HasAccess("write") && $this->HasAccess("read"))
{
#if ($newtag = $_POST['newtag']) $this->Redirect($this->Href('edit', $newtag));
if (isset($_POST['newtag'])) {
$newtag = $_POST['newtag'];
$this->Redirect($this->Href('edit', $newtag));
}
// init fields
$body = '';
$note = '';
$submit = '';
$output = '';
if ($_POST)
{
if (isset($_POST['body'])) {
// strip CRLF line endings down to LF to achieve consistency ... plus it saves database space.
// Note: these codes must remain enclosed in double-quotes to work! -- JsnX
// replace each 4 consecutive spaces at the start of a line with a tab
#$body = preg_replace("/\n[ ]{4}/", "\n\t", $body); # @@@ FIXME: misses first line and multiple sets of four spaces - JW 2005-01-16
# JW FIXED 2005-07-12
$pattern = '/^(\t*) {4}/m'; # m modifier: match ^ at start of line *and* at start of string;
$replace = "$1\t";
{
}
# @@@ NOTE: This could be easily extended to also change a '~' into a tab. But should we? '~' is easy to type and edit
}
// we don't need to escape here, we do that just before display (i.e., treat note just like body!)
if (isset($_POST['note'])) {
$note =
trim($_POST['note']);
}
if (isset($_POST['submit'])) {
$submit = $_POST['submit'];
}
// only if saving:
if ($submit == 'Store')
{
// check for overwriting
if ($this->page)
{
if ($this->page['id'] != $_POST['previous'])
{
$error = 'OVERWRITE ALERT: This page was modified by someone else while you were editing it.<br />'."\n".'Please copy your changes and re-edit this page.';
}
// check for spam - antispam measure added by JsnX 2005-03-21; modified 2005-03-25 (BETA)
$existing_link_count =
substr_count($this->
page['body'],
"http://");
if ($new_link_count >= $existing_link_count + XXX) # @@@ replace XXX by your own number!
{
$error = 'SPAM ALERT: It appears that you are trying to spam.<br />'."\n".$this->Format('If you are not spamming, please report the situation on Wikka:WikkaBugs.');
}
// end anti-spam BETA
}
// store
{
// only save if new body differs from old body
if ($body != $this->page['body']) {
// add page (revisions)
$this->SavePage($this->tag, $body, $note);
// now we render it internally so we can write the updated link table.
$this->ClearLinkTable();
$this->StartLinkTracking();
$dummy = $this->Header();
$dummy .= $this->Format($body);
$dummy .= $this->Footer();
$this->StopLinkTracking();
$this->WriteLinkTable();
$this->ClearLinkTable();
}
// forward
$this->Redirect($this->Href());
}
}
}
// fetch fields
#if (!$previous = $_POST['previous']) $previous = $this->page['id'];
$previous =
(isset($_POST['previous'])) ?
$_POST['previous'] :
$this->
page['id'];
if (!$body) $body = $this->page['body']; # @@@ ??
// replace each 4 consecutive spaces at the start of a line with a tab
#$body = preg_replace("/\n[ ]{4}/", "\n\t", $body); # @@@ FIXME: misses first line and multiple sets of four spaces - JW 2005-01-16
# JW FIXED 2005-07-12
$pattern = '/^(\t*) {4}/m'; # m modifier: match ^ at start of line *and* at start of string;
$replace = "$1\t";
{
}
// derive maximum length for a page name from the table structure
if ($result =
mysql_query("describe ".
$this->
config['table_prefix'].
"pages tag")) {
if (preg_match("/varchar\((\d+)\)/",
$field['Type'],
$matches)) $maxtaglen =
$matches[1];
}
else
{
$maxtaglen = 75;
}
// preview?
if ($submit == 'Preview') # preview page
{
$previewButtons =
"<hr />\n".
// We need to escape ALL entity refs before display so we display them _as_ entities instead of interpreting them
// so we use htmlspecialchars on the edit note (as on the body)
'<input size="50" type="text" name="note" value="'.htmlspecialchars($note).'"/> Note on your edit.<br />'."\n".
'<input name="submit" type="submit" value="Store" accesskey="s" />'."\n".
'<input name="submit" type="submit" value="Re-Edit" accesskey="p" />'."\n".
'<input type="button" value="Cancel" onclick="document.location=\''.$this->href('').'\';" />'."\n";
$output .= '<div class="previewhead">Preview</div>'."\n";
$output .= $this->Format($body);
$output .=
$this->FormOpen('edit')."\n".
'<input type="hidden" name="previous" value="'.$previous.'" />'."\n".
// We need to escape ALL entity refs before display so we display them _as_ entities instead of interpreting them
// hence htmlspecialchars() instead of htmlspecialchars_ent() which UNescapes entities!
'<input type="hidden" name="body" value="'.htmlspecialchars($body).'" />'."\n";
$output .=
"<br />\n".
$previewButtons.
$this->FormClose()."\n";
}
elseif (!
$this->
page &&
strlen($this->
tag) >
$maxtaglen) # rename page {
// truncate tag to feed a backlinks-handler with the correct value. may be omited. it only works if the link to a backlinks-handler is built in the footer.
// @@@ backlinks handler ???
$this->
tag =
substr($this->
tag,
0,
$maxtaglen);
$output = '<div class="error">Tag too long! '.$maxtaglen.' characters max.</div><br />'."\n";
$output .= 'FYI: Clicking on Rename will automatically truncate the tag to the correct size.<br /><br />'."\n";
$output .= $this->FormOpen('edit');
$output .= '<input name="newtag" size="75" value="'.$this->htmlspecialchars_ent($this->tag).'" />';
$output .= '<input name="submit" type="submit" value="Rename" />'."\n";
$output .= $this->FormClose();
}
else # edit page
{
// display form
{
$output .= '<div class="error">'.$error.'</div>'."\n";
}
// append a comment?
if ($_REQUEST['appendcomment'])
{
$body =
trim($body).
"\n\n----\n\n--".
$this->
GetUserName().
' ('.strftime
("%c").
')';
}
$output .=
$this->FormOpen('edit').
'<input type="hidden" name="previous" value="'.$previous.'" />'."\n".
// We need to escape ALL entity refs before display so we display them _as_ entities instead of interpreting them
// hence htmlspecialchars() instead of htmlspecialchars_ent() which UNescapes entities!
'<textarea id="body" name="body" style="width: 100%; height: 500px">'.htmlspecialchars($body).'</textarea><br />'."\n".
//note add Edit
// We need to escape ALL entity refs before display so we display them _as_ entities instead of interpreting them
// so we use htmlspecialchars on the edit note (as on the body)
'<input size="40" type="text" name="note" value="'.htmlspecialchars($note).'" /> Please add a note on your edit.<br />'."\n".
//finish
'<input name="submit" type="submit" value="Store" accesskey="s" /> <input name="submit" type="submit" value="Preview" accesskey="p" /> <input type="button" value="Cancel" onclick="document.location=\''.$this->Href('').'\';" />'."\n".
$this->FormClose();
if ($this->GetConfigValue('gui_editor') == 1) {
$output .=
'<script language="JavaScript" type="text/javascript" src="3rdparty/plugins/wikiedit/protoedit.js"></script>'."\n".
'<script language="JavaScript" type="text/javascript" src="3rdparty/plugins/wikiedit/wikiedit2.js"></script>'."\n".
'<script language="JavaScript" type="text/javascript">'." wE = new WikiEdit(); wE.init('body','WikiEdit','editornamecss');".'</script>'."\n";
}
}
}
else
{
$message = '<em>You don\'t have write access to this page. You might need to register an account to get write access.</em><br />'."\n".
"<br />\n".
'<a href="'.$this->Href('showcode').'" title="Click to view page formatting code">View formatting code for this page</a>'.
"<br />\n";
}
?>
</div>