1 <?php

     2 /*

     3  * Enano - an open-source CMS capable of wiki functions, Drupal-like sidebar blocks, and everything in between

     4  * Version 1.0 (Banshee)

     5  * Copyright (C) 2006-2007 Dan Fuhry

     6  * pageutils.php - a class that handles raw page manipulations, used mostly by AJAX requests or their old-fashioned form-based counterparts

     7  *

     8  * This program is Free Software; you can redistribute and/or modify it under the terms of the GNU General Public License

     9  * as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

    10  *

    11  * This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied

    12  * warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for details.

    13  */

    14  

    15 class PageUtils {

    16   

    17   /**

    18    * List possible username completions

    19    * @param $name the name to check for

    20    * @return array

    21    */

    22   

    23   function checkusername($name)

    24   {

    25     global $db, $session, $paths, $template, $plugins; // Common objects

    26     $q = $db->sql_query('SELECT username FROM '.table_prefix.'users WHERE username=\''.$db->escape(rawurldecode($name)).'\'');

    27     if(!$q) die(mysql_error());

    28     if($db->numrows() < 1) { $db->free_result(); return('good'); }

    29     else { $db->free_result(); return('bad'); }

    30   }

    31   

    32   /**

    33    * Get the wiki formatting source for a page

    34    * @param $page the full page id (Namespace:Pagename)

    35    * @return string

    36    * @todo (DONE) Make it require a password (just for security purposes)

    37    */

    38    

    39   function getsource($page, $password = false)

    40   {

    41     global $db, $session, $paths, $template, $plugins; // Common objects

    42     if(!isset($paths->pages[$page]))

    43     {

    44       return '';

    45     }

    46     

    47     if(strlen($paths->pages[$page]['password']) == 40)

    48     {

    49       if(!$password || ( $password != $paths->pages[$page]['password']))

    50       {

    51         return 'invalid_password';

    52       }

    53     }

    54     

    55     if(!$session->get_permissions('view_source')) // Dependencies handle this for us - this also checks for read privileges

    56       return 'access_denied';

    57     $pid = RenderMan::strToPageID($page);

    58     if($pid[1] == 'Special' || $pid[1] == 'Admin')

    59     {

    60       die('This type of page ('.$paths->nslist[$pid[1]].') cannot be edited because the page source code is not stored in the database.');

    61     }

    62     

    63     $e = $db->sql_query('SELECT page_text,char_tag FROM '.table_prefix.'page_text WHERE page_id=\''.$pid[0].'\' AND namespace=\''.$pid[1].'\'');

    64     if ( !$e )

    65     {

    66       $db->_die('The page text could not be selected.');

    67     }

    68     if( $db->numrows() < 1 )

    69     {

    70       return ''; //$db->_die('There were no rows in the text table that matched the page text query.');

    71     }

    72     

    73     $r = $db->fetchrow();

    74     $db->free_result();

    75     $message = $r['page_text'];

    76     

    77     return htmlspecialchars($message);

    78   }

    79   

    80   /**

    81    * Basically a frontend to RenderMan::getPage(), with the ability to send valid data for nonexistent pages

    82    * @param $page the full page id (Namespace:Pagename)

    83    * @param $send_headers true if the theme headers should be sent (still dependent on current page settings), false otherwise

    84    * @return string

    85    */

    86   

    87   function getpage($page, $send_headers = false, $hist_id = false)

    88   {

    89     global $db, $session, $paths, $template, $plugins; // Common objects

    90     ob_start();

    91     $pid = RenderMan::strToPageID($page);

    92     //die('<pre>'.print_r($pid, true).'</pre>');

    93     if(isset($paths->pages[$page]['password']) && strlen($paths->pages[$page]['password']) == 40)

    94     {

    95       password_prompt($page);

    96     }

    97     if(isset($paths->pages[$page]))

    98     {

    99       doStats($pid[0], $pid[1]);

   100     }

   101     if($paths->custom_page || $pid[1] == 'Special')

   102     {

   103       // If we don't have access to the page, get out and quick!

   104       if(!$session->get_permissions('read') && $pid[0] != 'Login' && $pid[0] != 'Register')

   105       {

   106         $template->tpl_strings['PAGE_NAME'] = 'Access denied';

   107         

   108         if ( $send_headers )

   109         {

   110           $template->header();

   111         }

   112         

   113         echo '<div class="error-box"><b>Access to this page is denied.</b><br />This may be because you are not logged in or you have not met certain criteria for viewing this page.</div>';

   114         

   115         if ( $send_headers )

   116         {

   117           $template->footer();

   118         }

   119         

   120         $r = ob_get_contents();

   121         ob_end_clean();

   122         return $r;

   123       }

   124       

   125       $fname = 'page_'.$pid[1].'_'.$paths->pages[$page]['urlname_nons'];

   126       @call_user_func($fname);

   127       

   128     }

   129     else if ( $pid[1] == 'Admin' )

   130     {

   131       // If we don't have access to the page, get out and quick!

   132       if(!$session->get_permissions('read'))

   133       {

   134         $template->tpl_strings['PAGE_NAME'] = 'Access denied';

   135         if ( $send_headers )

   136         {

   137           $template->header();

   138         }

   139         echo '<div class="error-box"><b>Access to this page is denied.</b><br />This may be because you are not logged in or you have not met certain criteria for viewing this page.</div>';

   140         if ( $send_headers )

   141         {

   142           $template->footer();

   143         }

   144         $r = ob_get_contents();

   145         ob_end_clean();

   146         return $r;

   147       }

   148       

   149       $fname = 'page_'.$pid[1].'_'.$pid[0];

   150       if ( !function_exists($fname) )

   151       {

   152         $title = 'Page backend not found';

   153         $message = "The administration page you are looking for was properly registered using the page API, but the backend function

   154                     (<tt>$fname</tt>) was not found. If this is a plugin page, then this is almost certainly a bug with the plugin.";

   155         if ( $send_headers )

   156         {

   157           die_friendly($title, "<p>$message</p>");

   158         }

   159         else

   160         {

   161           echo "<h2>$title</h2>\n<p>$message</p>";

   162         }

   163       }

   164       @call_user_func($fname);

   165     }

   166     else if ( !isset( $paths->pages[$page] ) )

   167     {

   168       ob_start();

   169       $code = $plugins->setHook('page_not_found');

   170       foreach ( $code as $cmd )

   171       {

   172         eval($cmd);

   173       }

   174       $text = ob_get_contents();

   175       if ( $text != '' )

   176       {

   177         ob_end_clean();

   178         return $text;

   179       }

   180       $template->header();

   181       if($m = $paths->sysmsg('Page_not_found'))

   182       {

   183         eval('?>'.RenderMan::render($m));

   184       }

   185       else

   186       {

   187         header('HTTP/1.1 404 Not Found');

   188         echo '<h3>There is no page with this title yet.</h3>

   189                <p>You have requested a page that doesn\'t exist yet.';

   190         if($session->get_permissions('create_page')) echo ' You can <a href="'.makeUrl($paths->page, 'do=edit', true).'" onclick="ajaxEditor(); return false;">create this page</a>, or return to the <a href="'.makeUrl(getConfig('main_page')).'">homepage</a>.';

   191         else echo ' Return to the <a href="'.makeUrl(getConfig('main_page')).'">homepage</a>.</p>';

   192         if($session->get_permissions('history_rollback')) {

   193           $e = $db->sql_query('SELECT * FROM '.table_prefix.'logs WHERE action=\'delete\' AND page_id=\''.$paths->cpage['urlname_nons'].'\' AND namespace=\''.$pid[1].'\' ORDER BY time_id DESC;');

   194           if(!$e) $db->_die('The deletion log could not be selected.');

   195           if($db->numrows() > 0) {

   196             $r = $db->fetchrow();

   197             echo '<p>This page also appears to have some log entries in the database - it seems that it was deleted on '.$r['date_string'].'. You can probably <a href="'.makeUrl($paths->page, 'do=rollback&amp;id='.$r['time_id']).'" onclick="ajaxRollback(\''.$r['time_id'].'\'); return false;">roll back</a> the deletion.</p>';

   198           }

   199           $db->free_result();

   200         }

   201         echo '<p>

   202                 HTTP Error: 404 Not Found

   203               </p>';

   204       }

   205       $template->footer();

   206     }

   207     else

   208     {

   209       

   210       // If we don't have access to the page, get out and quick!

   211       if(!$session->get_permissions('read'))

   212       {

   213         $template->tpl_strings['PAGE_NAME'] = 'Access denied';

   214         if($send_headers) $template->header();

   215         echo '<div class="error-box"><b>Access to this page is denied.</b><br />This may be because you are not logged in or you have not met certain criteria for viewing this page.</div>';

   216         if($send_headers) $template->footer();

   217         $r = ob_get_contents();

   218         ob_end_clean();

   219         return $r;

   220       }

   221       

   222       ob_start();

   223       $code = $plugins->setHook('page_custom_handler');

   224       foreach ( $code as $cmd )

   225       {

   226         eval($cmd);

   227       }

   228       $text = ob_get_contents();

   229       if ( $text != '' )

   230       {

   231         ob_end_clean();

   232         return $text;

   233       }

   234       

   235       if($hist_id) {

   236         $e = $db->sql_query('SELECT page_text,date_string,char_tag FROM '.table_prefix.'logs WHERE page_id=\''.$paths->pages[$page]['urlname_nons'].'\' AND namespace=\''.$pid[1].'\' AND log_type=\'page\' AND action=\'edit\' AND time_id='.$db->escape($hist_id).'');

   237         if($db->numrows() < 1)

   238         {

   239           $db->_die('There were no rows in the text table that matched the page text query.');

   240         }

   241         $r = $db->fetchrow();

   242         $db->free_result();

   243         $message = '<div class="info-box" style="margin-left: 0; margin-top: 5px;"><b>Notice:</b><br />The page you are viewing was archived on '.$r['date_string'].'.<br /><a href="'.makeUrl($page).'" onclick="ajaxReset(); return false;">View current version</a>  |  <a href="'.makeUrl($page, 'do=rollback&amp;id='.$hist_id).'" onclick="ajaxRollback(\''.$hist_id.'\')">Restore this version</a></div><br />'.RenderMan::render($r['page_text']);

   244         

   245         if( !$paths->pages[$page]['special'] )

   246         {

   247           if($send_headers)

   248           {

   249             $template->header(); 

   250           }

   251           display_page_headers();

   252         }

   253         

   254         eval('?>'.$message);

   255         

   256         if( !$paths->pages[$page]['special'] )

   257         {

   258           display_page_footers();

   259           if($send_headers)

   260           {

   261             $template->footer();

   262           }

   263         }

   264         

   265       } else {

   266         if(!$paths->pages[$page]['special'])

   267         {

   268           $message = RenderMan::getPage($paths->pages[$page]['urlname_nons'], $pid[1]);

   269         }

   270         else

   271         {

   272           $message = RenderMan::getPage($paths->pages[$page]['urlname_nons'], $pid[1], 0, false, false, false, false);

   273         }

   274         // This line is used to debug wikiformatted code

   275         // die('<pre>'.htmlspecialchars($message).'</pre>');

   276         

   277         if( !$paths->pages[$page]['special'] )

   278         {

   279           if($send_headers)

   280           {

   281             $template->header(); 

   282           }

   283           display_page_headers();

   284         }

   285 

   286         // This is it, this is what all of Enano has been working up to...

   287         

   288         eval('?>'.$message);

   289         

   290         if( !$paths->pages[$page]['special'] )

   291         {

   292           display_page_footers();

   293           if($send_headers)

   294           {

   295             $template->footer();

   296           }

   297         }

   298       }

   299     }

   300     $ret = ob_get_contents();

   301     ob_end_clean();

   302     return $ret;

   303   }

   304   

   305   /**

   306    * Writes page data to the database, after verifying permissions and running the XSS filter

   307    * @param $page_id the page ID

   308    * @param $namespace the namespace

   309    * @param $message the text to save

   310    * @return string

   311    */

   312    

   313   function savepage($page_id, $namespace, $message, $summary = 'No edit summary given', $minor = false)

   314   {

   315     global $db, $session, $paths, $template, $plugins; // Common objects

   316     $uid = sha1(microtime());

   317     $pname = $paths->nslist[$namespace] . $page_id;

   318     

   319     if(!$session->get_permissions('edit_page'))

   320       return 'Access to edit pages is denied.';

   321     

   322     if(!isset($paths->pages[$pname]))

   323     {

   324       if(!PageUtils::createPage($page_id, $namespace))

   325         return 'The page did not exist, and I was not able to create it. Permissions problem?';

   326     }

   327     

   328     $prot = ( ( $paths->pages[$pname]['protected'] == 2 && $session->user_logged_in && $session->reg_time + 60*60*24*4 < time() ) || $paths->pages[$pname]['protected'] == 1) ? true : false;

   329     $wiki = ( ( $paths->pages[$pname]['wiki_mode'] == 2 && getConfig('wiki_mode') == '1') || $paths->pages[$pname]['wiki_mode'] == 1) ? true : false;

   330     if(($prot || !$wiki) && $session->user_level < USER_LEVEL_ADMIN ) return('You are not authorized to edit this page.');

   331     

   332     // Strip potentially harmful tags and PHP from the message, if we are in wiki mode and the user is not an administrator

   333     $message = RenderMan::preprocess_text($message, false, false);

   334     

   335     $msg=$db->escape($message);

   336     

   337     $minor = $minor ? 'true' : 'false';

   338     $q='INSERT INTO '.table_prefix.'logs(log_type,action,time_id,date_string,page_id,namespace,page_text,char_tag,author,edit_summary,minor_edit) VALUES(\'page\', \'edit\', '.time().', \''.date('d M Y h:i a').'\', \''.$paths->cpage['urlname_nons'].'\', \''.$paths->namespace.'\', \''.$msg.'\', \''.$uid.'\', \''.$session->username.'\', \''.$db->escape(htmlspecialchars($summary)).'\', '.$minor.');';

   339     if(!$db->sql_query($q)) $db->_die('The history (log) entry could not be inserted into the logs table.');

   340     

   341     $q = 'UPDATE '.table_prefix.'page_text SET page_text=\''.$msg.'\',char_tag=\''.$uid.'\' WHERE page_id=\''.$page_id.'\' AND namespace=\''.$namespace.'\';';

   342     $e = $db->sql_query($q);

   343     if(!$e) $db->_die('Enano was unable to save the page contents. Your changes have been lost <tt>:\'(</tt>.');

   344       

   345     $paths->rebuild_page_index($page_id, $namespace);

   346       

   347     return 'good';

   348   }

   349   

   350   /**

   351    * Creates a page, both in memory and in the database.

   352    * @param string $page_id

   353    * @param string $namespace

   354    * @return bool true on success, false on failure

   355    */

   356   

   357   function createPage($page_id, $namespace, $name = false, $visible = 1)

   358   {

   359     global $db, $session, $paths, $template, $plugins; // Common objects

   360     if(in_array($namespace, Array('Special', 'Admin')))

   361     {

   362       // echo '<b>Notice:</b> PageUtils::createPage: You can\'t create a special page in the database<br />';

   363       return false; // Can't create a special page

   364     }

   365     

   366     if(!isset($paths->nslist[$namespace]))

   367     {

   368       // echo '<b>Notice:</b> PageUtils::createPage: Couldn\'t look up the namespace<br />';

   369       return false; // Couldn't look up namespace

   370     }

   371     

   372     $pname = $paths->nslist[$namespace] . $page_id;

   373     if(isset($paths->pages[$pname]))

   374     {

   375       // echo '<b>Notice:</b> PageUtils::createPage: Page already exists<br />';

   376       return false; // Page already exists

   377     }

   378     

   379     if(!$session->get_permissions('create_page'))

   380     {

   381       // echo '<b>Notice:</b> PageUtils::createPage: Not authorized to create pages<br />';

   382       return false; // Access denied

   383     }

   384     

   385     if($session->user_level < USER_LEVEL_ADMIN && $namespace == 'System')

   386     {

   387       // echo '<b>Notice:</b> PageUtils::createPage: Not authorized to create system messages<br />';

   388       return false; // Not authorized to create system messages

   389     }

   390     

   391     if ( !$name )

   392       $name = str_replace('_', ' ', $page_id);

   393     $page = str_replace(' ', '_', $page_id);

   394     $regex = '#^([A-z0-9 _\-\.\/\!\@\(\)]*)$#is';

   395     if(!preg_match($regex, $page))

   396     {

   397       //echo '<b>Notice:</b> PageUtils::createPage: Name contains invalid characters<br />';

   398       return false; // Name contains invalid characters

   399     }

   400     

   401     $prot = ( $namespace == 'System' ) ? 1 : 0;

   402     

   403     $paths->add_page(Array(

   404       'name'=>$name,

   405       'urlname'=>$page,

   406       'namespace'=>$namespace,

   407       'special'=>0,'visible'=>1,'comments_on'=>0,'protected'=>$prot,'delvotes'=>0,'delvote_ips'=>'','wiki_mode'=>2,

   408     ));

   409     

   410     $qa = $db->sql_query('INSERT INTO '.table_prefix.'pages(name,urlname,namespace,visible,protected) VALUES(\''.$db->escape($name).'\', \''.$db->escape($page).'\', \''.$namespace.'\', '. ( $visible ? '1' : '0' ) .', '.$prot.');');

   411     $qb = $db->sql_query('INSERT INTO '.table_prefix.'page_text(page_id,namespace) VALUES(\''.$db->escape($page).'\', \''.$namespace.'\');');

   412     $qc = $db->sql_query('INSERT INTO '.table_prefix.'logs(time_id,date_string,log_type,action,author,page_id,namespace) VALUES('.time().', \''.date('d M Y h:i a').'\', \'page\', \'create\', \''.$session->username.'\', \''.$db->escape($page).'\', \''.$namespace.'\');');

   413     

   414     if($qa && $qb && $qc)

   415       return true;

   416     else

   417     {

   418       echo $db->get_error();

   419       return false;

   420     }

   421   }

   422   

   423   /**

   424    * Sets the protection level on a page.

   425    * @param $page_id string the page ID

   426    * @param $namespace string the namespace

   427    * @param $level int level of protection - 0 is off, 1 is full, 2 is semi

   428    * @param $reason string why the page is being (un)protected

   429    * @return string - "good" on success, in all other cases, an error string (on query failure, calls $db->_die() )

   430    */

   431   function protect($page_id, $namespace, $level, $reason)

   432   {

   433     global $db, $session, $paths, $template, $plugins; // Common objects

   434     

   435     $pname = $paths->nslist[$namespace] . $page_id;

   436     $wiki = ( ( $paths->pages[$pname]['wiki_mode'] == 2 && getConfig('wiki_mode') == '1') || $paths->pages[$pname]['wiki_mode'] == 1) ? true : false;

   437     $prot = ( ( $paths->pages[$pname]['protected'] == 2 && $session->user_logged_in && $session->reg_time + 60*60*24*4 < time() ) || $paths->pages[$pname]['protected'] == 1) ? true : false;

   438     

   439     if(!$session->get_permissions('protect')) return('Insufficient access rights');

   440     if(!$wiki) return('Page protection only has an effect when Wiki Mode is enabled.');

   441     if(!preg_match('#^([0-9]+){1}$#', (string)$level)) return('Invalid $level parameter.');

   442     

   443     if($reason!='NO_REASON') {

   444       switch($level)

   445       {

   446         case 0:

   447           $q = 'INSERT INTO '.table_prefix.'logs(time_id,date_string,log_type,action,author,page_id,namespace,edit_summary) VALUES('.time().', \''.date('d M Y h:i a').'\', \'page\', \'unprot\', \''.$session->username.'\', \''.$page_id.'\', \''.$namespace.'\', \''.$db->escape(htmlspecialchars($reason)).'\');';

   448           break;

   449         case 1:

   450           $q = 'INSERT INTO '.table_prefix.'logs(time_id,date_string,log_type,action,author,page_id,namespace,edit_summary) VALUES('.time().', \''.date('d M Y h:i a').'\', \'page\', \'prot\', \''.$session->username.'\', \''.$page_id.'\', \''.$namespace.'\', \''.$db->escape(htmlspecialchars($reason)).'\');';

   451           break;

   452         case 2:

   453           $q = 'INSERT INTO '.table_prefix.'logs(time_id,date_string,log_type,action,author,page_id,namespace,edit_summary) VALUES('.time().', \''.date('d M Y h:i a').'\', \'page\', \'semiprot\', \''.$session->username.'\', \''.$page_id.'\', \''.$namespace.'\', \''.$db->escape(htmlspecialchars($reason)).'\');';

   454           break;

   455         default:

   456           return 'PageUtils::protect(): Invalid value for $level';

   457           break;

   458       }

   459       if(!$db->sql_query($q)) $db->_die('The log entry for the page protection could not be inserted.');

   460     }

   461     

   462     $q = $db->sql_query('UPDATE '.table_prefix.'pages SET protected='.$_POST['level'].' WHERE urlname=\''.$page_id.'\' AND namespace=\''.$namespace.'\';');

   463     if(!$q) $db->_die('The pages table was not updated.');

   464     

   465     return('good');

   466   }

   467   

   468   /**

   469    * Generates an HTML table with history information in it.

   470    * @param $page_id the page ID

   471    * @param $namespace the namespace

   472    * @return string

   473    */

   474   

   475   function histlist($page_id, $namespace)

   476   {

   477     global $db, $session, $paths, $template, $plugins; // Common objects

   478     

   479     if(!$session->get_permissions('history_view'))

   480       return 'Access denied';

   481     

   482     ob_start();

   483     

   484     $pname = $paths->nslist[$namespace] . $page_id;

   485     $wiki = ( ( $paths->pages[$pname]['wiki_mode'] == 2 && getConfig('wiki_mode') == '1') || $paths->pages[$pname]['wiki_mode'] == 1) ? true : false;

   486     $prot = ( ( $paths->pages[$pname]['protected'] == 2 && $session->user_logged_in && $session->reg_time + 60*60*24*4 < time() ) || $paths->pages[$pname]['protected'] == 1) ? true : false;

   487     

   488     $q = 'SELECT time_id,date_string,page_id,namespace,author,edit_summary,minor_edit FROM '.table_prefix.'logs WHERE log_type=\'page\' AND action=\'edit\' AND page_id=\''.$page_id.'\' AND namespace=\''.$namespace.'\' ORDER BY time_id DESC;';

   489     if(!$db->sql_query($q)) $db->_die('The history data for the page "'.$paths->cpage['name'].'" could not be selected.');

   490     echo 'History of edits and actions<h3>Edits:</h3>';

   491     $numrows = $db->numrows();

   492     if($numrows < 1) echo 'No history entries in this category.';

   493     else

   494     {

   495       

   496       echo '<form action="'.makeUrlNS($namespace, $page_id, 'do=diff').'" onsubmit="ajaxHistDiff(); return false;" method="get">

   497             <input type="submit" value="Compare selected revisions" />

   498             <br /><span>&nbsp;</span>

   499             <div class="tblholder">

   500             <table border="0" width="100%" cellspacing="1" cellpadding="4">

   501             <tr>

   502               <th colspan="2">Diff</th>

   503               <th>Date/time</th>

   504               <th>User</th>

   505               <th>Edit summary</th>

   506               <th>Minor</th>

   507               <th colspan="3">Actions</th>

   508             </tr>'."\n"."\n";

   509       $cls = 'row2';

   510       $ticker = 0;

   511       

   512       while($r = $db->fetchrow()) {

   513         

   514         $ticker++;

   515         

   516         if($cls == 'row2') $cls = 'row1';

   517         else $cls = 'row2';

   518         

   519         echo '<tr>'."\n";

   520         

   521         // Diff selection

   522         if($ticker == 1)

   523         {

   524           $s1 = '';

   525           $s2 = 'checked="checked" ';

   526         }

   527         elseif($ticker == 2)

   528         {

   529           $s1 = 'checked="checked" ';

   530           $s2 = '';

   531         }

   532         else

   533         {

   534           $s1 = '';

   535           $s2 = '';

   536         }

   537         if($ticker > 1)        echo '<td class="'.$cls.'" style="padding: 0;"><input '.$s1.'name="diff1" type="radio" value="'.$r['time_id'].'" id="diff1_'.$r['time_id'].'" class="clsDiff1Radio" onclick="selectDiff1Button(this);" /></td>'."\n"; else echo '<td class="'.$cls.'"></td>';

   538         if($ticker < $numrows) echo '<td class="'.$cls.'" style="padding: 0;"><input '.$s2.'name="diff2" type="radio" value="'.$r['time_id'].'" id="diff2_'.$r['time_id'].'" class="clsDiff2Radio" onclick="selectDiff2Button(this);" /></td>'."\n"; else echo '<td class="'.$cls.'"></td>';

   539         

   540         // Date and time

   541         echo '<td class="'.$cls.'">'.$r['date_string'].'</td class="'.$cls.'">'."\n";

   542         

   543         // User

   544         if($session->get_permissions('mod_misc') && preg_match('#^([0-9]*){1,3}\.([0-9]*){1,3}\.([0-9]*){1,3}\.([0-9]*){1,3}$#', $r['author'])) $rc = ' style="cursor: pointer;" title="Click cell background for reverse DNS info" onclick="ajaxReverseDNS(this, \''.$r['author'].'\');"';

   545         else $rc = '';

   546         echo '<td class="'.$cls.'"'.$rc.'><a href="'.makeUrlNS('User', $r['author']).'" ';

   547         if(!isPage($paths->nslist['User'] . $r['author'])) echo 'class="wikilink-nonexistent"';

   548         echo '>'.$r['author'].'</a></td class="'.$cls.'">'."\n";

   549         

   550         // Edit summary

   551         echo '<td class="'.$cls.'">'.$r['edit_summary'].'</td>'."\n";

   552         

   553         // Minor edit

   554         echo '<td class="'.$cls.'" style="text-align: center;">'. (( $r['minor_edit'] ) ? 'M' : '' ) .'</td>'."\n";

   555         

   556         // Actions!

   557         echo '<td class="'.$cls.'" style="text-align: center;"><a href="'.makeUrlNS($namespace, $page_id, 'oldid='.$r['time_id']).'" onclick="ajaxHistView(\''.$r['time_id'].'\'); return false;">View revision</a></td>'."\n";

   558         echo '<td class="'.$cls.'" style="text-align: center;"><a href="'.makeUrl($paths->nslist['Special'].'Contributions/'.$r['author']).'">View user contribs</a></td>'."\n";

   559         echo '<td class="'.$cls.'" style="text-align: center;"><a href="'.makeUrlNS($namespace, $page_id, 'do=rollback&amp;id='.$r['time_id']).'" onclick="ajaxRollback(\''.$r['time_id'].'\'); return false;">Revert to this revision</a></td>'."\n";

   560         

   561         echo '</tr>'."\n"."\n";

   562         

   563       }

   564       echo '</table>

   565             </div>

   566             <br />

   567             <input type="hidden" name="do" value="diff" />

   568             <input type="submit" value="Compare selected revisions" />

   569             </form>

   570             <script type="text/javascript">buildDiffList();</script>';

   571     }

   572     $db->free_result();

   573     echo '<h3>Other changes:</h3>';

   574     $q = 'SELECT time_id,action,date_string,page_id,namespace,author,edit_summary,minor_edit FROM '.table_prefix.'logs WHERE log_type=\'page\' AND action!=\'edit\' AND page_id=\''.$paths->cpage['urlname_nons'].'\' AND namespace=\''.$paths->namespace.'\' ORDER BY time_id DESC;';

   575     if(!$db->sql_query($q)) $db->_die('The history data for the page "'.$paths->cpage['name'].'" could not be selected.');

   576     if($db->numrows() < 1) echo 'No history entries in this category.';

   577     else {

   578       

   579       echo '<div class="tblholder"><table border="0" width="100%" cellspacing="1" cellpadding="4"><tr><th>Date/time</th><th>User</th><th>Minor</th><th>Action taken</th><th>Extra info</th><th colspan="2"></th></tr>';

   580       $cls = 'row2';

   581       while($r = $db->fetchrow()) {

   582         

   583         if($cls == 'row2') $cls = 'row1';

   584         else $cls = 'row2';

   585         

   586         echo '<tr>';

   587         

   588         // Date and time

   589         echo '<td class="'.$cls.'">'.$r['date_string'].'</td class="'.$cls.'">';

   590         

   591         // User

   592         echo '<td class="'.$cls.'"><a href="'.makeUrlNS('User', $r['author']).'" ';

   593         if(!isPage($paths->nslist['User'] . $r['author'])) echo 'class="wikilink-nonexistent"';

   594         echo '>'.$r['author'].'</a></td class="'.$cls.'">';

   595         

   596         

   597         // Minor edit

   598         echo '<td class="'.$cls.'" style="text-align: center;">'. (( $r['minor_edit'] ) ? 'M' : '' ) .'</td>';

   599         

   600         // Action taken

   601         echo '<td class="'.$cls.'">';

   602         if    ($r['action']=='prot')     echo 'Protected page</td><td class="'.$cls.'">Reason: '.$r['edit_summary'];

   603         elseif($r['action']=='unprot')   echo 'Unprotected page</td><td class="'.$cls.'">Reason: '.$r['edit_summary'];

   604         elseif($r['action']=='semiprot') echo 'Semi-protected page</td><td class="'.$cls.'">Reason: '.$r['edit_summary'];

   605         elseif($r['action']=='rename')   echo 'Renamed page</td><td class="'.$cls.'">Old title: '.$r['edit_summary'];

   606         elseif($r['action']=='create')   echo 'Created page</td><td class="'.$cls.'">';

   607         elseif($r['action']=='delete')   echo 'Deleted page</td><td class="'.$cls.'">';

   608         elseif($r['action']=='reupload') echo 'Uploaded new file version</td><td class="'.$cls.'">Reason: '.$r['edit_summary'];

   609         echo '</td>';

   610         

   611         // Actions!

   612         echo '<td class="'.$cls.'" style="text-align: center;"><a href="'.makeUrl($paths->nslist['Special'].'Contributions/'.$r['author']).'">View user contribs</a></td>';

   613         echo '<td class="'.$cls.'" style="text-align: center;"><a href="'.makeUrlNS($namespace, $page_id, 'do=rollback&amp;id='.$r['time_id']).'" onclick="ajaxRollback(\''.$r['time_id'].'\'); return false;">Revert action</a></td>';

   614         

   615         //echo '(<a href="#" onclick="ajaxRollback(\''.$r['time_id'].'\'); return false;">rollback</a>) <i>'.$r['date_string'].'</i> '.$r['author'].' (<a href="'.makeUrl($paths->nslist['User'].$r['author']).'">Userpage</a>, <a href="'.makeUrl($paths->nslist['Special'].'Contributions/'.$r['author']).'">Contrib</a>): ';

   616         

   617         if($r['minor_edit']) echo '<b> - minor edit</b>';

   618         echo '<br />';

   619         

   620         echo '</tr>';

   621       }

   622       echo '</table></div>';

   623     }

   624     $db->free_result();

   625     $ret = ob_get_contents();

   626     ob_end_clean();

   627     return $ret;

   628   }

   629   

   630   /**

   631    * Rolls back a logged action

   632    * @param $id the time ID, a.k.a. the primary key in the logs table

   633    * @return string

   634    */

   635    

   636   function rollback($id)

   637   {

   638     global $db, $session, $paths, $template, $plugins; // Common objects

   639     if(!$session->get_permissions('history_rollback')) return('You are not authorized to perform rollbacks.');

   640     if(!preg_match('#^([0-9]+)$#', (string)$id)) return('The value "id" on the query string must be an integer.');

   641     $e = $db->sql_query('SELECT log_type,action,date_string,page_id,namespace,page_text,char_tag,author,edit_summary FROM '.table_prefix.'logs WHERE time_id='.$id.';');

   642     if(!$e) $db->_die('The rollback data could not be selected.');

   643     $rb = $db->fetchrow();

   644     $db->free_result();

   645     switch($rb['log_type']) {

   646       case "page":

   647         switch($rb['action']) {

   648           case "edit":

   649             $t = $db->escape($rb['page_text']);

   650             $e = $db->sql_query('UPDATE '.table_prefix.'page_text SET page_text=\''.$t.'\',char_tag=\''.$rb['char_tag'].'\' WHERE page_id=\''.$rb['page_id'].'\' AND namespace=\''.$rb['namespace'].'\'');

   651             if(!$e) return("An error occurred during the rollback operation.\nMySQL said: ".mysql_error()."\n\nSQL backtrace:\n".$db->sql_backtrace());

   652             else return('The page "'.$paths->pages[$paths->nslist[$rb['namespace']].$rb['page_id']]['name'].'" has been rolled back to the state it was in on '.$rb['date_string'].'.');

   653             break;

   654           case "rename":

   655             $t = $db->escape($rb['edit_summary']);

   656             $e = $db->sql_query('UPDATE '.table_prefix.'pages SET name=\''.$t.'\' WHERE urlname=\''.$rb['page_id'].'\' AND namespace=\''.$rb['namespace'].'\'');

   657             if(!$e) return("An error occurred during the rollback operation.\nMySQL said: ".mysql_error()."\n\nSQL backtrace:\n".$db->sql_backtrace());

   658             else return('The page "'.$paths->pages[$paths->nslist[$rb['namespace']].$rb['page_id']]['name'].'" has been rolled back to the name it had ("'.$rb['edit_summary'].'") before '.$rb['date_string'].'.');

   659             break;

   660           case "prot":

   661             $e = $db->sql_query('UPDATE '.table_prefix.'pages SET protected=0 WHERE urlname=\''.$rb['page_id'].'\' AND namespace=\''.$rb['namespace'].'\'');

   662             if(!$e) return("An error occurred during the rollback operation.\nMySQL said: ".mysql_error()."\n\nSQL backtrace:\n".$db->sql_backtrace());

   663             else return('The page "'.$paths->pages[$paths->nslist[$rb['namespace']].$rb['page_id']]['name'].'" has been unprotected according to the log created at '.$rb['date_string'].'.');

   664             break;

   665           case "semiprot":

   666             $e = $db->sql_query('UPDATE '.table_prefix.'pages SET protected=0 WHERE urlname=\''.$rb['page_id'].'\' AND namespace=\''.$rb['namespace'].'\'');

   667             if(!$e) return("An error occurred during the rollback operation.\nMySQL said: ".mysql_error()."\n\nSQL backtrace:\n".$db->sql_backtrace());

   668             else return('The page "'.$paths->pages[$paths->nslist[$rb['namespace']].$rb['page_id']]['name'].'" has been unprotected according to the log created at '.$rb['date_string'].'.');

   669             break;

   670           case "unprot":

   671             $e = $db->sql_query('UPDATE '.table_prefix.'pages SET protected=1 WHERE urlname=\''.$rb['page_id'].'\' AND namespace=\''.$rb['namespace'].'\'');

   672             if(!$e) return("An error occurred during the rollback operation.\nMySQL said: ".mysql_error()."\n\nSQL backtrace:\n".$db->sql_backtrace());

   673             else return('The page "'.$paths->pages[$paths->nslist[$rb['namespace']].$rb['page_id']]['name'].'" has been protected according to the log created at '.$rb['date_string'].'.');

   674             break;

   675           case "delete":

   676             if(!$session->get_permissions('history_rollback_extra')) return('Administrative privileges are required for page undeletion.');

   677             if(isset($paths->pages[$paths->cpage['urlname']])) return('You cannot raise a dead page that is alive.');

   678             $name = str_replace('_', ' ', $rb['page_id']);

   679             $e = $db->sql_query('INSERT INTO '.table_prefix.'pages(name,urlname,namespace) VALUES( \''.$name.'\', \''.$rb['page_id'].'\',\''.$rb['namespace'].'\' )');if(!$e) return("An error occurred during the rollback operation.\nMySQL said: ".mysql_error()."\n\nSQL backtrace:\n".$db->sql_backtrace());

   680             $e = $db->sql_query('SELECT page_text,char_tag FROM '.table_prefix.'logs WHERE page_id=\''.$rb['page_id'].'\' AND namespace=\''.$rb['namespace'].'\' AND log_type=\'page\' AND action=\'edit\' ORDER BY time_id DESC;'); if(!$e) return("An error occurred during the rollback operation.\nMySQL said: ".mysql_error()."\n\nSQL backtrace:\n".$db->sql_backtrace());

   681             $r = $db->fetchrow();

   682             $e = $db->sql_query('INSERT INTO '.table_prefix.'page_text(page_id,namespace,page_text,char_tag) VALUES(\''.$rb['page_id'].'\',\''.$rb['namespace'].'\',\''.$db->escape($r['page_text']).'\',\''.$r['char_tag'].'\')'); if(!$e) return("An error occurred during the rollback operation.\nMySQL said: ".mysql_error()."\n\nSQL backtrace:\n".$db->sql_backtrace());

   683             return('The page "'.$name.'" has been undeleted according to the log created at '.$rb['date_string'].'.');

   684             break;

   685           case "reupload":

   686             if(!$session->get_permissions('history_rollbacks_extra')) return('Administrative privileges are required for file rollbacks.');

   687             $newtime = time();

   688             $newdate = date('d M Y h:i a');

   689             if(!$db->sql_query('UPDATE '.table_prefix.'logs SET time_id='.$newtime.',date_string=\''.$newdate.'\' WHERE time_id='.$id)) return('Error during query: '.mysql_error());

   690             if(!$db->sql_query('UPDATE '.table_prefix.'files SET time_id='.$newtime.' WHERE time_id='.$id)) return('Error during query: '.mysql_error());

   691             return('The file has been rolled back to the version uploaded on '.date('d M Y h:i a', (int)$id).'.');

   692             break;

   693           default:

   694             return('Rollback of the action "'.$rb['action'].'" is not yet supported.');

   695             break;

   696         }

   697         break;

   698       case "security":

   699       case "login":

   700         return('A '.$rb['log_type'].'-related log entry cannot be rolled back.');

   701         break;

   702       default:

   703         return('Unknown log entry type: "'.$rb['log_type'].'"');

   704     }

   705   }

   706   

   707   /**

   708    * Posts a comment.

   709    * @param $page_id the page ID

   710    * @param $namespace the namespace

   711    * @param $name the name of the person posting, defaults to current username/IP

   712    * @param $subject the subject line of the comment

   713    * @param $text the comment text

   714    * @return string javascript code

   715    */

   716    

   717   function addcomment($page_id, $namespace, $name, $subject, $text, $captcha_code = false, $captcha_id = false)

   718   {

   719     global $db, $session, $paths, $template, $plugins; // Common objects

   720     $_ob = '';

   721     if(!$session->get_permissions('post_comments'))

   722       return 'Access denied';

   723     if(getConfig('comments_need_login') == '2' && !$session->user_logged_in) _die('Access denied to post comments: you need to be logged in first.');

   724     if(getConfig('comments_need_login') == '1' && !$session->user_logged_in)

   725     {

   726       if(!$captcha_code || !$captcha_id) _die('BUG: PageUtils::addcomment: no CAPTCHA data passed to method');

   727       $result = $session->get_captcha($captcha_id);

   728       if($captcha_code != $result) _die('The confirmation code you entered was incorrect.');

   729     }

   730     $text = RenderMan::preprocess_text($text);

   731     $name = $session->user_logged_in ? RenderMan::preprocess_text($session->username) : RenderMan::preprocess_text($name);

   732     $subj = RenderMan::preprocess_text($subject);

   733     if(getConfig('approve_comments')=='1') $appr = '0'; else $appr = '1';

   734     $q = 'INSERT INTO '.table_prefix.'comments(page_id,namespace,subject,comment_data,name,user_id,approved,time) VALUES(\''.$page_id.'\',\''.$namespace.'\',\''.$subj.'\',\''.$text.'\',\''.$name.'\','.$session->user_id.','.$appr.','.time().')';

   735     $e = $db->sql_query($q);

   736     if(!$e) die('alert(unescape(\''.rawurlencode('Error inserting comment data: '.mysql_error().'\n\nQuery:\n'.$q).'\'))');

   737     else $_ob .= '<div class="info-box">Your comment has been posted.</div>';

   738     return PageUtils::comments($page_id, $namespace, false, Array(), $_ob);

   739   }

   740   

   741   /**

   742    * Generates partly-compiled HTML/Javascript code to be eval'ed by the user's browser to display comments

   743    * @param $page_id the page ID

   744    * @param $namespace the namespace

   745    * @param $action administrative action to perform, default is false

   746    * @param $flags additional info for $action, shouldn't be used except when deleting/approving comments, etc.

   747    * @param $_ob text to prepend to output, used by PageUtils::addcomment

   748    * @return array

   749    * @access private

   750    */

   751    

   752   function comments_raw($page_id, $namespace, $action = false, $flags = Array(), $_ob = '')

   753   {

   754     global $db, $session, $paths, $template, $plugins; // Common objects

   755     

   756     $pname = $paths->nslist[$namespace] . $page_id;

   757     

   758     ob_start();

   759     

   760     if($action && $session->get_permissions('mod_comments')) // Nip hacking attempts in the bud

   761     {

   762       switch($action) {

   763       case "delete":

   764         if(isset($flags['id']))

   765         {

   766           $q = 'DELETE FROM '.table_prefix.'comments WHERE page_id=\''.$page_id.'\' AND namespace=\''.$namespace.'\' AND comment_id='.intval($flags['id']).' LIMIT 1;';

   767         } else {

   768           $n = $db->escape($flags['name']);

   769           $s = $db->escape($flags['subj']);

   770           $t = $db->escape($flags['text']);

   771           $q = 'DELETE FROM '.table_prefix.'comments WHERE page_id=\''.$page_id.'\' AND namespace=\''.$namespace.'\' AND name=\''.$n.'\' AND subject=\''.$s.'\' AND comment_data=\''.$t.'\' LIMIT 1;';

   772         }

   773         $e=$db->sql_query($q);

   774         if(!$e) die('alert(unesape(\''.rawurlencode('Error during query: '.mysql_error().'\n\nQuery:\n'.$q).'\'));');

   775         break;

   776       case "approve":

   777         if(isset($flags['id']))

   778         {

   779           $where = 'comment_id='.intval($flags['id']);

   780         } else {

   781           $n = $db->escape($flags['name']);

   782           $s = $db->escape($flags['subj']);

   783           $t = $db->escape($flags['text']);

   784           $where = 'name=\''.$n.'\' AND subject=\''.$s.'\' AND comment_data=\''.$t.'\'';

   785         }

   786         $q = 'SELECT approved FROM '.table_prefix.'comments WHERE page_id=\''.$page_id.'\' AND namespace=\''.$namespace.'\' AND '.$where.' LIMIT 1;';

   787         $e = $db->sql_query($q);

   788         if(!$e) die('alert(unesape(\''.rawurlencode('Error selecting approval status: '.mysql_error().'\n\nQuery:\n'.$q).'\'));');

   789         $r = $db->fetchrow();

   790         $db->free_result();

   791         $a = ( $r['approved'] ) ? '0' : '1';

   792         $q = 'UPDATE '.table_prefix.'comments SET approved='.$a.' WHERE page_id=\''.$page_id.'\' AND namespace=\''.$namespace.'\' AND '.$where.';';

   793         $e=$db->sql_query($q);

   794         if(!$e) die('alert(unesape(\''.rawurlencode('Error during query: '.mysql_error().'\n\nQuery:\n'.$q).'\'));');

   795         if($a=='1') $v = 'Unapprove';

   796         else $v = 'Approve';

   797         echo 'document.getElementById("mdgApproveLink'.$_GET['id'].'").innerHTML="'.$v.'";';

   798         break;

   799       }

   800     }

   801     

   802     if(!defined('ENANO_TEMPLATE_LOADED'))

   803     {

   804       $template->load_theme($session->theme, $session->style);

   805     }

   806     

   807     $tpl = $template->makeParser('comment.tpl');

   808     

   809     $e = $db->sql_query('SELECT * FROM '.table_prefix.'comments WHERE page_id=\''.$page_id.'\' AND namespace=\''.$namespace.'\' AND approved=0;');

   810     if(!$e) $db->_die('The comment text data could not be selected.');

   811     $num_unapp = $db->numrows();

   812     $db->free_result();

   813     $e = $db->sql_query('SELECT * FROM '.table_prefix.'comments WHERE page_id=\''.$page_id.'\' AND namespace=\''.$namespace.'\' AND approved=1;');

   814     if(!$e) $db->_die('The comment text data could not be selected.');

   815     $num_app = $db->numrows();

   816     $db->free_result();

   817     $lq = $db->sql_query('SELECT c.comment_id,c.subject,c.name,c.comment_data,c.approved,c.time,c.user_id,u.user_level,u.signature

   818                   FROM '.table_prefix.'comments AS c

   819                   LEFT JOIN '.table_prefix.'users AS u

   820                     ON c.user_id=u.user_id

   821                   WHERE page_id=\''.$page_id.'\'

   822                   AND namespace=\''.$namespace.'\' ORDER BY c.time ASC;');

   823     if(!$lq) _die('The comment text data could not be selected. '.mysql_error());

   824     $_ob .= '<h3>Article Comments</h3>';

   825     $n = ( $session->get_permissions('mod_comments')) ? $db->numrows() : $num_app;

   826     if($n==1) $s = 'is '.$n.' comment'; else $s = 'are '.$n.' comments';

   827     if($n < 1)

   828     {

   829       $_ob .= '<p>There are currently no comments on this '.strtolower($namespace).'';

   830       if($namespace != 'Article') $_ob .= ' page';

   831       $_ob .= '.</p>';

   832     } else $_ob .= '<p>There '.$s.' on this article.</p>';

   833     if($session->get_permissions('mod_comments') && $num_unapp > 0) $_ob .= ' <span style="color: #D84308">'.$num_unapp.' of those are unapproved.</span>';

   834     elseif(!$session->get_permissions('mod_comments') && $num_unapp > 0) { $u = ($num_unapp == 1) ? "is $num_unapp comment" : "are $num_unapp comments"; $_ob .= ' However, there ' . $u . ' awating approval.'; }

   835     $list = 'list = { ';

   836     // _die(htmlspecialchars($ttext));

   837     $i = -1;

   838     while($row = $db->fetchrow($lq))

   839     {

   840       $i++;

   841       $strings = Array();

   842       $bool = Array();

   843       if($session->get_permissions('mod_comments') || $row['approved']) {

   844         $list .= $i . ' : { \'comment\' : unescape(\''.rawurlencode($row['comment_data']).'\'), \'name\' : unescape(\''.rawurlencode($row['name']).'\'), \'subject\' : unescape(\''.rawurlencode($row['subject']).'\'), }, ';

   845         

   846         // Comment ID (used in the Javascript apps)

   847         $strings['ID'] = (string)$i;

   848         

   849         // Determine the name, and whether to link to the user page or not

   850         $name = '';

   851         if($row['user_id'] > 0) $name .= '<a href="'.makeUrlNS('User', str_replace(' ', '_', $row['name'])).'">';

   852         $name .= $row['name'];

   853         if($row['user_id'] > 0) $name .= '</a>';

   854         $strings['NAME'] = $name; unset($name);

   855         

   856         // Subject

   857         $s = $row['subject'];

   858         if(!$row['approved']) $s .= ' <span style="color: #D84308">(Unapproved)</span>';

   859         $strings['SUBJECT'] = $s;

   860         

   861         // Date and time

   862         $strings['DATETIME'] = date('F d, Y h:i a', $row['time']);

   863         

   864         // User level

   865         switch($row['user_level'])

   866         {

   867           default:

   868           case USER_LEVEL_GUEST:

   869             $l = 'Guest';

   870             break;

   871           case USER_LEVEL_MEMBER:

   872             $l = 'Member';

   873             break;

   874           case USER_LEVEL_MOD:

   875             $l = 'Moderator';

   876             break;

   877           case USER_LEVEL_ADMIN:

   878             $l = 'Administrator';

   879             break;

   880         }

   881         $strings['USER_LEVEL'] = $l; unset($l);

   882         

   883         // The actual comment data

   884         $strings['DATA'] = RenderMan::render($row['comment_data']);

   885         

   886         if($session->get_permissions('edit_comments'))

   887         {

   888           // Edit link

   889           $strings['EDIT_LINK'] = '<a href="'.makeUrlNS($namespace, $page_id, 'do=comments&amp;sub=editcomment&amp;id='.$row['comment_id']).'" onclick="editComment(\''.$i.'\'); return false;" id="editbtn_'.$i.'">edit</a>';

   890         

   891           // Delete link

   892           $strings['DELETE_LINK'] = '<a href="'.makeUrlNS($namespace, $page_id, 'do=comments&amp;sub=deletecomment&amp;id='.$row['comment_id']).'" onclick="ajaxDeleteComment(\''.$i.'\'); return false;">delete</a>';

   893         }

   894         else

   895         {

   896           // Edit link

   897           $strings['EDIT_LINK'] = '';

   898         

   899           // Delete link

   900           $strings['DELETE_LINK'] = '';

   901         }

   902         

   903         // Send PM link

   904         $strings['SEND_PM_LINK'] = ( $session->user_logged_in && $row['user_id'] > 0 ) ? '<a href="'.makeUrlNS('Special', 'PrivateMessages/Compose/To/'.$row['name']).'">Send private message</a><br />' : '';

   905         

   906         // Add Buddy link

   907         $strings['ADD_BUDDY_LINK'] = ( $session->user_logged_in && $row['user_id'] > 0 ) ? '<a href="'.makeUrlNS('Special', 'PrivateMessages/FriendList/Add/'.$row['name']).'">Add to buddy list</a>' : '';

   908         

   909         // Mod links

   910         $applink = '';

   911         $applink .= '<a href="'.makeUrlNS($namespace, $page_id, 'do=comments&amp;sub=admin&amp;action=approve&amp;id='.$row['comment_id']).'" onclick="ajaxCommentAdmin(\'approve\', \''.$i.'\'); return false;" id="mdgApproveLink'.$i.'">';

   912         if($row['approved']) $applink .= 'Unapprove';

   913         else $applink .= 'Approve';

   914         $applink .= '</a>';

   915         $strings['MOD_APPROVE_LINK'] = $applink; unset($applink);

   916         $strings['MOD_DELETE_LINK'] = '<a href="'.makeUrlNS($namespace, $page_id, 'do=comments&amp;sub=admin&amp;action=delete&amp;id='.$row['comment_id']).'" onclick="ajaxCommentAdmin(\'delete\', \''.$i.'\'); return false;">Delete</a>';

   917         

   918         // Signature

   919         $strings['SIGNATURE'] = '';

   920         if($row['signature'] != '') $strings['SIGNATURE'] = RenderMan::render($row['signature']);

   921         

   922         $bool['auth_mod'] = ($session->get_permissions('mod_comments')) ? true : false;

   923         $bool['can_edit'] = ( ( $session->user_logged_in && $row['name'] == $session->username && $session->get_permissions('edit_comments') ) || $session->get_permissions('mod_comments') ) ? true : false;

   924         $bool['signature'] = ( $strings['SIGNATURE'] == '' ) ? false : true;

   925         

   926         // Done processing and compiling, now let's cook it into HTML

   927         $tpl->assign_vars($strings);

   928         $tpl->assign_bool($bool);

   929         $_ob .= $tpl->run();

   930       }

   931     }

   932     if(getConfig('comments_need_login') != '2' || $session->user_logged_in)

   933     {

   934       if(!$session->get_permissions('post_comments'))

   935       {

   936         $_ob .= '<h3>Got something to say?</h3><p>Access to post comments on this page is denied.</p>';

   937       }

   938       else

   939       {

   940         $_ob .= '<h3>Got something to say?</h3>If you have comments or suggestions on this article, you can shout it out here.';

   941         if(getConfig('approve_comments')=='1') $_ob .= '  Before your comment will be visible to the public, a moderator will have to approve it.';

   942         if(getConfig('comments_need_login') == '1' && !$session->user_logged_in) $_ob .= ' Because you are not logged in, you will need to enter a visual confirmation before your comment will be posted.';

   943         $sn = $session->user_logged_in ? $session->username . '<input name="name" id="mdgScreenName" type="hidden" value="'.$session->username.'" />' : '<input name="name" id="mdgScreenName" type="text" size="35" />';

   944         $_ob .= '  <a href="#" id="mdgCommentFormLink" style="display: none;" onclick="document.getElementById(\'mdgCommentForm\').style.display=\'block\';this.style.display=\'none\';return false;">Leave a comment...</a>

   945         <div id="mdgCommentForm">

   946         <h3>Comment form</h3>

   947         <form action="'.makeUrlNS($namespace, $page_id, 'do=comments&amp;sub=postcomment').'" method="post" style="margin-left: 1em">

   948         <table border="0">

   949         <tr><td>Your name or screen name:</td><td>'.$sn.'</td></tr>

   950         <tr><td>Comment subject:</td><td><input name="subj" id="mdgSubject" type="text" size="35" /></td></tr>';

   951         if(getConfig('comments_need_login') == '1' && !$session->user_logged_in)

   952         {

   953           $session->kill_captcha();

   954           $captcha = $session->make_captcha();

   955           $_ob .= '<tr><td>Visual confirmation:<br /><small>Please enter the code you see on the right.</small></td><td><img src="'.makeUrlNS('Special', 'Captcha/'.$captcha).'" alt="Visual confirmation" style="cursor: pointer;" onclick="this.src = \''.makeUrlNS("Special", "Captcha/".$captcha).'/\'+Math.floor(Math.random() * 100000);" /><input name="captcha_id" id="mdgCaptchaID" type="hidden" value="'.$captcha.'" /><br />Code: <input name="captcha_input" id="mdgCaptchaInput" type="text" size="10" /><br /><small><script type="text/javascript">document.write("If you can\'t read the code, click on the image to generate a new one.");</script><noscript>If you can\'t read the code, please refresh this page to generate a new one.</noscript></small></td></tr>';

   956         }

   957         $_ob .= '

   958         <tr><td valign="top">Comment text:<br />(most HTML will be stripped)</td><td><textarea name="text" id="mdgCommentArea" rows="10" cols="40"></textarea></td></tr>

   959         <tr><td colspan="2" style="text-align: center;"><input type="submit" value="Submit Comment" /></td></tr>

   960         </table>

   961         </form>

   962         </div>';

   963       }

   964     } else {

   965       $_ob .= '<h3>Got something to say?</h3><p>You need to be logged in to post comments. <a href="'.makeUrlNS('Special', 'Login/'.$pname.'%2523comments').'">Log in</a></p>';

   966     }

   967     $list .= '};';

   968     echo 'document.getElementById(\'ajaxEditContainer\').innerHTML = unescape(\''. rawurlencode($_ob) .'\');

   969     ' . $list;

   970     echo 'Fat.fade_all(); document.getElementById(\'mdgCommentForm\').style.display = \'none\'; document.getElementById(\'mdgCommentFormLink\').style.display="inline";';

   971     

   972     $ret = ob_get_contents();

   973     ob_end_clean();

   974     return Array($ret, $_ob);

   975     

   976   }

   977   

   978   /**

   979    * Generates ready-to-execute Javascript code to be eval'ed by the user's browser to display comments

   980    * @param $page_id the page ID

   981    * @param $namespace the namespace

   982    * @param $action administrative action to perform, default is false

   983    * @param $flags additional info for $action, shouldn't be used except when deleting/approving comments, etc.

   984    * @param $_ob text to prepend to output, used by PageUtils::addcomment

   985    * @return string

   986    */

   987    

   988   function comments($page_id, $namespace, $action = false, $id = -1, $_ob = '')

   989   {

   990     global $db, $session, $paths, $template, $plugins; // Common objects

   991     $r = PageUtils::comments_raw($page_id, $namespace, $action, $id, $_ob);

   992     return $r[0];

   993   }

   994   

   995   /**

   996    * Generates HTML code for comments - used in browser compatibility mode

   997    * @param $page_id the page ID

   998    * @param $namespace the namespace

   999    * @param $action administrative action to perform, default is false

  1000    * @param $flags additional info for $action, shouldn't be used except when deleting/approving comments, etc.

  1001    * @param $_ob text to prepend to output, used by PageUtils::addcomment

  1002    * @return string

  1003    */

  1004   

  1005   function comments_html($page_id, $namespace, $action = false, $id = -1, $_ob = '')

  1006   {

  1007     global $db, $session, $paths, $template, $plugins; // Common objects

  1008     $r = PageUtils::comments_raw($page_id, $namespace, $action, $id, $_ob);

  1009     return $r[1];

  1010   }

  1011   

  1012   /**

  1013    * Updates comment data.

  1014    * @param $page_id the page ID

  1015    * @param $namespace the namespace

  1016    * @param $subject new subject

  1017    * @param $text new text

  1018    * @param $old_subject the old subject, unprocessed and identical to the value in the DB

  1019    * @param $old_text the old text, unprocessed and identical to the value in the DB

  1020    * @param $id the javascript list ID, used internally by the client-side app

  1021    * @return string

  1022    */

  1023   

  1024   function savecomment($page_id, $namespace, $subject, $text, $old_subject, $old_text, $id = -1)

  1025   {

  1026     global $db, $session, $paths, $template, $plugins; // Common objects

  1027     if(!$session->get_permissions('edit_comments'))

  1028       return 'result="BAD";error="Access denied"';

  1029     // Avoid SQL injection

  1030     $old_text    = $db->escape($old_text);

  1031     $old_subject = $db->escape($old_subject);

  1032     // Safety check - username/login

  1033     if(!$session->get_permissions('mod_comments')) // allow mods to edit comments

  1034     {

  1035       if(!$session->user_logged_in) _die('AJAX comment save safety check failed because you are not logged in. Sometimes this can happen because you are using a browser that does not send cookies as part of AJAX requests.<br /><br />Please log in and try again.');

  1036       $q = 'SELECT c.name FROM '.table_prefix.'comments c, '.table_prefix.'users u WHERE comment_data=\''.$old_text.'\' AND subject=\''.$old_subject.'\' AND page_id=\''.$page_id.'\' AND namespace=\''.$namespace.'\' AND u.user_id=c.user_id;';

  1037       $s = $db->sql_query($q);

  1038       if(!$s) _die('SQL error during safety check: '.mysql_error().'<br /><br />Attempted SQL:<br /><pre>'.htmlspecialchars($q).'</pre>');

  1039       $r = $db->fetchrow($s);

  1040       $db->free_result();

  1041       if($db->numrows() < 1 || $r['name'] != $session->username) _die('Safety check failed, probably due to a hacking attempt.');

  1042     }

  1043     $s = RenderMan::preprocess_text($subject);

  1044     $t = RenderMan::preprocess_text($text);

  1045     $sql  = 'UPDATE '.table_prefix.'comments SET subject=\''.$s.'\',comment_data=\''.$t.'\' WHERE comment_data=\''.$old_text.'\' AND subject=\''.$old_subject.'\' AND page_id=\''.$page_id.'\' AND namespace=\''.$namespace.'\'';

  1046     $result = $db->sql_query($sql);

  1047     if($result)

  1048     {

  1049       return 'result="GOOD";

  1050                       list['.$id.'][\'subject\'] = unescape(\''.str_replace('%5Cn', '%0A', rawurlencode(str_replace('{{EnAnO:Newline}}', '\\n', stripslashes(str_replace('\\n', '{{EnAnO:Newline}}', $s))))).'\');

  1051                       list['.$id.'][\'comment\'] = unescape(\''.str_replace('%5Cn', '%0A', rawurlencode(str_replace('{{EnAnO:Newline}}', '\\n', stripslashes(str_replace('\\n', '{{EnAnO:Newline}}', $t))))).'\'); id = '.$id.';

  1052       s = unescape(\''.rawurlencode($s).'\');

  1053       t = unescape(\''.str_replace('%5Cn', '<br \\/>', rawurlencode(RenderMan::render(str_replace('{{EnAnO:Newline}}', "\n", stripslashes(str_replace('\\n', '{{EnAnO:Newline}}', $t)))))).'\');';

  1054     }

  1055     else

  1056     {

  1057       return 'result="BAD"; error=unescape("'.rawurlencode('Enano encountered a problem whilst saving the comment.

  1058       Performed SQL:

  1059       '.$sql.'

  1060     

  1061       Error returned by MySQL: '.mysql_error()).'");';

  1062     }

  1063   }

  1064   

  1065   /**

  1066    * Updates comment data using the comment_id column instead of the old, messy way

  1067    * @param $page_id the page ID

  1068    * @param $namespace the namespace

  1069    * @param $subject new subject

  1070    * @param $text new text

  1071    * @param $id the comment ID (primary key in enano_comments table)

  1072    * @return string

  1073    */

  1074   

  1075   function savecomment_neater($page_id, $namespace, $subject, $text, $id)

  1076   {

  1077     global $db, $session, $paths, $template, $plugins; // Common objects

  1078     if(!is_int($id)) die('PageUtils::savecomment: $id is not an integer, aborting for safety');

  1079     if(!$session->get_permissions('edit_comments'))

  1080       return 'Access denied';

  1081     // Safety check - username/login

  1082     if(!$session->get_permissions('mod_comments')) // allow mods to edit comments

  1083     {

  1084       if(!$session->user_logged_in) _die('AJAX comment save safety check failed because you are not logged in. Sometimes this can happen because you are using a browser that does not send cookies as part of AJAX requests.<br /><br />Please log in and try again.');

  1085       $q = 'SELECT c.name FROM '.table_prefix.'comments c, '.table_prefix.'users u WHERE comment_id='.$id.' AND page_id=\''.$page_id.'\' AND namespace=\''.$namespace.'\' AND u.user_id=c.user_id;';

  1086       $s = $db->sql_query($q);

  1087       if(!$s) _die('SQL error during safety check: '.mysql_error().'<br /><br />Attempted SQL:<br /><pre>'.htmlspecialchars($q).'</pre>');

  1088       $r = $db->fetchrow($s);

  1089       if($db->numrows() < 1 || $r['name'] != $session->username) _die('Safety check failed, probably due to a hacking attempt.');

  1090       $db->free_result();

  1091     }

  1092     $s = RenderMan::preprocess_text($subject);

  1093     $t = RenderMan::preprocess_text($text);

  1094     $sql  = 'UPDATE '.table_prefix.'comments SET subject=\''.$s.'\',comment_data=\''.$t.'\' WHERE comment_id='.$id.' AND page_id=\''.$page_id.'\' AND namespace=\''.$namespace.'\'';

  1095     $result = $db->sql_query($sql);

  1096     if($result)

  1097     return 'good';

  1098     else return 'Enano encountered a problem whilst saving the comment.

  1099     Performed SQL:

  1100     '.$sql.'

  1101     

  1102     Error returned by MySQL: '.mysql_error();

  1103   }

  1104   

  1105   /**

  1106    * Deletes a comment.

  1107    * @param $page_id the page ID

  1108    * @param $namespace the namespace

  1109    * @param $name the name the user posted under

  1110    * @param $subj the subject of the comment to be deleted

  1111    * @param $text the text of the comment to be deleted

  1112    * @param $id the javascript list ID, used internally by the client-side app

  1113    * @return string

  1114    */

  1115   

  1116   function deletecomment($page_id, $namespace, $name, $subj, $text, $id)

  1117   {

  1118     global $db, $session, $paths, $template, $plugins; // Common objects

  1119     

  1120     if(!$session->get_permissions('edit_comments'))

  1121       return 'alert("Access to delete/edit comments is denied");';

  1122     

  1123     if(!preg_match('#^([0-9]+)$#', (string)$id)) die('$_GET[id] is improperly formed.');

  1124     $n = $db->escape($name);

  1125     $s = $db->escape($subj);

  1126     $t = $db->escape($text);

  1127     

  1128     // Safety check - username/login

  1129     if(!$session->get_permissions('mod_comments')) // allows mods to delete comments

  1130     {

  1131       if(!$session->user_logged_in) _die('AJAX comment save safety check failed because you are not logged in. Sometimes this can happen because you are using a browser that does not send cookies as part of AJAX requests.<br /><br />Please log in and try again.');

  1132       $q = 'SELECT c.name FROM '.table_prefix.'comments c, '.table_prefix.'users u WHERE comment_data=\''.$t.'\' AND subject=\''.$s.'\' AND page_id=\''.$page_id.'\' AND namespace=\''.$namespace.'\' AND u.user_id=c.user_id;';

  1133       $s = $db->sql_query($q);

  1134       if(!$s) _die('SQL error during safety check: '.mysql_error().'<br /><br />Attempted SQL:<br /><pre>'.htmlspecialchars($q).'</pre>');

  1135       $r = $db->fetchrow($s);