<?php

/**

 * Enano - an open-source CMS capable of wiki functions, Drupal-like sidebar blocks, and everything in between

 * Copyright (C) 2006-2009 Dan Fuhry

 * paths.php - The part of Enano that actually manages content. Everything related to page handling and namespaces is in here.

 *

 * This program is Free Software; you can redistribute and/or modify it under the terms of the GNU General Public License

 * as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

 *

 * This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied

 * warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for details.

 *

 * @package Enano

 * @subpackage PathManager

 * @see http://enanocms.org/Help:API_Documentation

 */

class pathManager

{

	public $title, $pages, $custom_page, $cpage, $page, $fullpage, $page_exists, $page_id, $namespace, $nslist, $admin_tree, $wiki_mode, $page_protected, $template_cache, $external_api_page;

	/**

 	* List of custom processing functions for namespaces. This is protected so trying to do anything with it will throw an error.

 	* @access private

 	* @var array

 	*/

	protected $namespace_processors;

	function __construct()

	{

		global $db, $session, $paths, $template, $plugins; // Common objects

		$GLOBALS['paths'] =& $this;

		$this->pages = Array();

		// DEFINE NAMESPACES HERE

		// The key names should NOT EVER be changed, or Enano will be very broken

		$namespace_delimiter = ( defined('WINDOWS_MOD_REWRITE_WORKAROUNDS') ) ? '.' : ':';

		$this->nslist = Array(

			'Article'  => '',

			'User'     => 'User' . $namespace_delimiter,

			'File'     => 'File' . $namespace_delimiter,

			'Help'     => 'Help' . $namespace_delimiter,

			'Admin'    => 'Admin' . $namespace_delimiter,

			'Special'  => 'Special' . $namespace_delimiter,

			'System'   => 'Enano' . $namespace_delimiter,

			'Template' => 'Template' . $namespace_delimiter,

			'Category' => 'Category' . $namespace_delimiter,

			'API'      => 'SystemAPI' . $namespace_delimiter,

			'Project'  => sanitize_page_id(getConfig('site_name')) . $namespace_delimiter,

			);

		// ACL types

		// These can also be added from within plugins

		$session->register_acl_type('read',                   AUTH_ALLOW,    'perm_read');

		$session->register_acl_type('post_comments',          AUTH_ALLOW,    'perm_post_comments',          Array('read'),                                            'Article|User|Project|Template|File|Help|System|Category');

		$session->register_acl_type('edit_comments',          AUTH_ALLOW,    'perm_edit_comments',          Array('post_comments'),                                   'Article|User|Project|Template|File|Help|System|Category');

		$session->register_acl_type('edit_page',              AUTH_WIKIMODE, 'perm_edit_page',              Array('view_source'),                                     'Article|User|Project|Template|File|Help|System|Category');

		$session->register_acl_type('edit_wysiwyg',           AUTH_ALLOW,    'perm_edit_wysiwyg',           Array(),                                                  'Article|User|Project|Template|File|Help|System|Category');

		$session->register_acl_type('view_source',            AUTH_WIKIMODE, 'perm_view_source',            Array('read'),                                            'Article|User|Project|Template|File|Help|System|Category'); // Only used if the page is protected

		$session->register_acl_type('mod_comments',           AUTH_DISALLOW, 'perm_mod_comments',           Array('edit_comments'),                                   'Article|User|Project|Template|File|Help|System|Category');

		$session->register_acl_type('history_view',           AUTH_WIKIMODE, 'perm_history_view',           Array('read'),                                            'Article|User|Project|Template|File|Help|System|Category');

		$session->register_acl_type('history_rollback',       AUTH_DISALLOW, 'perm_history_rollback',       Array('history_view'),                                    'Article|User|Project|Template|File|Help|System|Category');

		$session->register_acl_type('history_rollback_extra', AUTH_DISALLOW, 'perm_history_rollback_extra', Array('history_rollback'),                                'Article|User|Project|Template|File|Help|System|Category');

		$session->register_acl_type('protect',                AUTH_DISALLOW, 'perm_protect',                Array('read'),                                            'Article|User|Project|Template|File|Help|System|Category');

		$session->register_acl_type('rename',                 AUTH_WIKIMODE, 'perm_rename',                 Array('read'),                                            'Article|User|Project|Template|File|Help|System|Category');

		$session->register_acl_type('clear_logs',             AUTH_DISALLOW, 'perm_clear_logs',             Array('read', 'protect', 'even_when_protected'),          'Article|User|Project|Template|File|Help|System|Category');

		$session->register_acl_type('vote_delete',            AUTH_ALLOW,    'perm_vote_delete',            Array('read'),                                            'Article|User|Project|Template|File|Help|System|Category');

		$session->register_acl_type('vote_reset',             AUTH_DISALLOW, 'perm_vote_reset',             Array('read'),                                            'Article|User|Project|Template|File|Help|System|Category');

		$session->register_acl_type('delete_page',            AUTH_DISALLOW, 'perm_delete_page',            Array(),                                                  'Article|User|Project|Template|File|Help|System|Category');

		$session->register_acl_type('tag_create',             AUTH_ALLOW,    'perm_tag_create',             Array('read'),                                            'Article|User|Project|Template|File|Help|System|Category');

		$session->register_acl_type('tag_delete_own',         AUTH_ALLOW,    'perm_tag_delete_own',         Array('read', 'tag_create'),                              'Article|User|Project|Template|File|Help|System|Category');

		$session->register_acl_type('tag_delete_other',       AUTH_DISALLOW, 'perm_tag_delete_other',       Array('read'),                                            'Article|User|Project|Template|File|Help|System|Category');

		$session->register_acl_type('set_wiki_mode',          AUTH_DISALLOW, 'perm_set_wiki_mode',          Array('read'),                                            'Article|User|Project|Template|File|Help|System|Category');

		$session->register_acl_type('password_set',           AUTH_DISALLOW, 'perm_password_set',           Array('read'),                                            'Article|User|Project|Template|File|Help|System|Category');

		$session->register_acl_type('password_reset',         AUTH_DISALLOW, 'perm_password_reset',         Array('read'),                                            'Article|User|Project|Template|File|Help|System|Category');

		$session->register_acl_type('mod_misc',               AUTH_DISALLOW, 'perm_mod_misc',               Array(),                                                  'All');

		$session->register_acl_type('edit_cat',               AUTH_WIKIMODE, 'perm_edit_cat',               Array('read'),                                            'Article|User|Project|Template|File|Help|System|Category');

		$session->register_acl_type('even_when_protected',    AUTH_DISALLOW, 'perm_even_when_protected',    Array('edit_page', 'rename', 'mod_comments', 'edit_cat'), 'Article|User|Project|Template|File|Help|System|Category');

		$session->register_acl_type('create_page',            AUTH_WIKIMODE, 'perm_create_page',            Array(),                                                  'All');

		$session->register_acl_type('upload_files',           AUTH_DISALLOW, 'perm_upload_files',           Array('create_page'),                                     'All');

		$session->register_acl_type('upload_new_version',     AUTH_WIKIMODE, 'perm_upload_new_version',     Array('upload_files'),                                    'All');

		$session->register_acl_type('html_in_pages',          AUTH_DISALLOW, 'perm_html_in_pages',          Array('edit_page'),                                       'Article|User|Project|Template|File|Help|System|Category|Admin');

		$session->register_acl_type('php_in_pages',           AUTH_DISALLOW, 'perm_php_in_pages',           Array('edit_page', 'html_in_pages'),                      'Article|User|Project|Template|File|Help|System|Category|Admin');

		$session->register_acl_type('custom_user_title',      AUTH_DISALLOW, 'perm_custom_user_title',      Array(),                                                  'User|Special');

		$session->register_acl_type('edit_acl',               AUTH_DISALLOW, 'perm_edit_acl',               Array());

		// DO NOT add new admin pages here! Use a plugin to call $paths->addAdminNode();

		$this->addAdminNode('adm_cat_general',    'adm_page_general_config', 'GeneralConfig',          array(2, 2));

		$this->addAdminNode('adm_cat_general',    'adm_page_file_uploads',   'UploadConfig',           array(2, 5));

		$this->addAdminNode('adm_cat_general',    'adm_page_file_types',     'UploadAllowedMimeTypes', array(1, 5));

		$this->addAdminNode('adm_cat_content',    'adm_page_manager',        'PageManager',            array(1, 4));

		$this->addAdminNode('adm_cat_content',    'adm_page_editor',         'PageEditor',             array(3, 3));

		$this->addAdminNode('adm_cat_content',    'adm_page_pg_groups',      'PageGroups',             array(4, 3));

		$this->addAdminNode('adm_cat_appearance', 'adm_page_themes',         'ThemeManager',           array(4, 4));

		$this->addAdminNode('adm_cat_appearance', 'adm_page_plugins',        'PluginManager',          array(2, 4));

		$this->addAdminNode('adm_cat_appearance', 'adm_page_editsidebar',    'EditSidebar'            );

		$this->addAdminNode('adm_cat_appearance', 'adm_page_db_backup',      'DBBackup',               array(1, 2));

		$this->addAdminNode('adm_cat_appearance', 'adm_page_lang_manager',   'LangManager',            array(1, 3));

		$this->addAdminNode('adm_cat_appearance', 'adm_page_cache_manager',  'CacheManager',           array(3, 1));

		$this->addAdminNode('adm_cat_users',      'adm_page_users',          'UserManager',            array(3, 5));

		$this->addAdminNode('adm_cat_users',      'adm_page_user_groups',    'GroupManager',           array(3, 2));

		$this->addAdminNode('adm_cat_users',      'adm_page_coppa',          'COPPA',                  array(4, 1));

		$this->addAdminNode('adm_cat_users',      'adm_page_mass_email',     'MassEmail',              array(2, 3));

		$this->addAdminNode('adm_cat_users',      'adm_page_user_ranks',     'UserRanks',              array(4, 5));

		$this->addAdminNode('adm_cat_security',   'adm_page_security_log',   'SecurityLog',            array(3, 4));

		$this->addAdminNode('adm_cat_security',   'adm_page_ban_control',    'BanControl',             array(2, 1));

		$code = $plugins->setHook('acl_rule_init');

		foreach ( $code as $cmd )

		{

			eval($cmd);

		}

		$this->wiki_mode = ( getConfig('wiki_mode') == '1' ) ? 1 : 0;

		$this->template_cache = Array();

	}

	function init($title)

	{

		global $db, $session, $paths, $template, $plugins; // Common objects

		global $lang;

		global $cache;

		$code = $plugins->setHook('paths_init_before');

		foreach ( $code as $cmd )

		{

			eval($cmd);

		}

		if ( defined('ENANO_INTERFACE_INDEX') || defined('ENANO_INTERFACE_AJAX') || defined('IN_ENANO_UPGRADE') )

		{

			if ( empty($title) )

				$title = get_title();

			if ( empty($title) && !have_blank_urlname_page() )

			{

				$this->main_page();

			}

			if ( strstr($title, ' ') || strstr($title, '+') || strstr($title, '%20') )

			{

				$title = sanitize_page_id($title);

				redirect(makeUrl($title), '', '', 0);

			}

			$title = sanitize_page_id($title);

			// We've got the title, pull the namespace from it

			$namespace = 'Article';

			$page_id = $title;

			foreach ( $this->nslist as $ns => $prefix )

			{

				$prefix_len = strlen($prefix);

				if ( substr($title, 0, $prefix_len) == $prefix )

				{

					$page_id = substr($title, $prefix_len);

					$namespace = $ns;

				}

			}

			$this->namespace = $namespace;

			$this->fullpage = $title;

			if ( $namespace == 'Special' || $namespace == 'Admin' )

			{

				list($page_id) = explode('/', $page_id);

			}

			$this->page = $this->nslist[$namespace] . $page_id;

			$this->page_id = $page_id;

			$ns = namespace_factory($page_id, $namespace);

			$this->cpage = $ns->get_cdata();

			$this->page_exists = $ns->exists();

			$this->wiki_mode = false;

			$wiki_mode_eligible = ($session->user_logged_in && getConfig('wiki_mode_require_login', 0) == 1) || getConfig('wiki_mode_require_login', 0) == 0;

			$global_wiki_mode = getConfig('wiki_mode', 0) == 1;

			if ( $wiki_mode_eligible && (($this->cpage['wiki_mode'] == 2 && $global_wiki_mode) || $this->cpage['wiki_mode'] == 1))

				$this->wiki_mode = true;

			// die("All done setting parameters. What we've got:<br/>namespace: $namespace<br/>fullpage: $this->fullpage<br/>page: $this->page<br/>page_id: $this->page_id");

		}

		else

		{

			// Starting up Enano with the API from a page that wants to do its own thing. Generate

			// metadata for an anonymous page and avoid redirection at all costs.

			if ( isset($GLOBALS['title']) )

			{

				$title =& $GLOBALS['title'];

			}

			else

			{

				$title = basename($_SERVER['SCRIPT_NAME']);

			}

			$base_uri = scriptPath == '' ? ltrim($_SERVER['SCRIPT_NAME'], '/') : str_replace( scriptPath . '/', '', $_SERVER['SCRIPT_NAME'] );

			$this->page = $this->nslist['API'] . sanitize_page_id($base_uri);

			$this->fullpage = $this->nslist['API'] . sanitize_page_id($base_uri);

			$this->namespace = 'API';

			$this->cpage = array(

					'name' => $title,

					'urlname' => sanitize_page_id($base_uri),

					'namespace' => 'API',

					'special' => 1,

					'visible' => 1,

					'comments_on' => 1,

					'protected' => 1,

					'delvotes' => 0,

					'delvote_ips' => '',

					'page_format' => getConfig('default_page_format', 'wikitext')

				);

			$this->external_api_page = true;

			$code = $plugins->setHook('paths_external_api_page');

			foreach ( $code as $cmd )

			{

				eval($cmd);

			}

		}

		$this->page = sanitize_page_id($this->page);

		$this->fullpage = sanitize_page_id($this->fullpage);

		if(isset($this->pages[$this->page]))

		{

			$this->page_exists = true;

			$this->cpage = $this->pages[$this->page];

			$this->page_id =& $this->cpage['urlname_nons'];

			$this->namespace = $this->cpage['namespace'];

			if(!isset($this->cpage['wiki_mode'])) $this->cpage['wiki_mode'] = 2;

			// Determine the wiki mode for this page, now that we have this->cpage established

			if($this->cpage['wiki_mode'] == 2)

			{

				$this->wiki_mode = (int)getConfig('wiki_mode', 0);

			}

			else

			{

				$this->wiki_mode = $this->cpage['wiki_mode'];

			}

			// Allow the user to create/modify his user page uncondtionally (admins can still protect the page)

			if($this->page == $this->nslist['User'].str_replace(' ', '_', $session->username))

			{

				$this->wiki_mode = true;

			}

			// And above all, if the site requires wiki mode to be off for non-logged-in users, disable it now

			if(getConfig('wiki_mode_require_login')=='1' && !$session->user_logged_in)

			{

				$this->wiki_mode = false;

			}

			if($this->cpage['protected'] == 2)

			{

				// The page is semi-protected, determine permissions

				if($session->user_logged_in && $session->reg_time + 60*60*24*4 < time()) 

				{

					$this->page_protected = 0;

				}

				else

				{

					$this->page_protected = 1;

				}

			}

			else

			{

				$this->page_protected = $this->cpage['protected'];

			}

		}

		else

		{

			$this->page_exists = false;

			$page_name = dirtify_page_id($this->page);

			$page_name = str_replace('_', ' ', $page_name);

			$pid_cleaned = sanitize_page_id($this->page);

			if ( $pid_cleaned != $this->page )

			{

				redirect(makeUrl($pid_cleaned), 'Sanitizer message', 'page id sanitized', 0);

			}

			if ( !is_array($this->cpage) )

			{

				$this->cpage = Array(

					'name' => $page_name,

					'urlname' => $this->page,

					'namespace' => 'Article',

					'special' => 0,

					'visible' => 0,

					'comments_on' => 1,

					'protected' => 0,

					'delvotes' => 0,

					'delvote_ips' => '',

					'wiki_mode' => 2,

					'page_format' => getConfig('default_page_format', 'wikitext')

					);

			}

			// Look for a namespace prefix in the urlname, and assign a different namespace, if necessary

			$k = array_keys($this->nslist);

			for($i=0;$i<sizeof($this->nslist);$i++)

			{

				$ln = strlen($this->nslist[$k[$i]]);

				if( substr($this->page, 0, $ln) == $this->nslist[$k[$i]] )

				{

					$this->cpage['namespace'] = $k[$i];

					$this->cpage['urlname_nons'] = substr($this->page, strlen($this->nslist[$this->cpage['namespace']]), strlen($this->page));

					if(!isset($this->cpage['wiki_mode'])) 

					{

						$this->cpage['wiki_mode'] = 2;

					}

				}

			}

			$this->namespace = $this->cpage['namespace'];

			$this->page_id =& $this->cpage['urlname_nons'];

			if($this->namespace=='System') 

			{

				$this->cpage['protected'] = 1;

			}

			if($this->namespace == 'Special' && !$this->external_api_page)

			{

				// Can't load nonexistent pages

				if( is_string(get_main_page()) )

				{

					$main_page = makeUrl(get_main_page());

				}

				else

				{

					$main_page = makeUrl($this->pages[0]['urlname']);

				}

				redirect($main_page, $lang->get('page_msg_special_404_title'), $lang->get('page_msg_special_404_body', array('sp_link' => makeUrlNS('Special', 'SpecialPages'))), 15);

				exit;

			}

			// Allow the user to create/modify his user page uncondtionally (admins can still protect the page)

			if($this->page == $this->nslist['User'].str_replace(' ', '_', $session->username)) 

			{

				$this->wiki_mode = true;

			}

		}

		// This is used in the admin panel to keep track of form submission targets

		$this->cpage['module'] = $this->cpage['urlname'];

		$this->cpage['require_admin'] = ( $this->cpage['namespace'] === 'Admin' );

		// Page is set up, call any hooks

		$code = $plugins->setHook('page_set');

		foreach ( $code as $cmd )

		{

			eval($cmd);

		}

		profiler_log('Paths and CMS core initted');

		$session->init_permissions();

	}

	/**

 	* Fetch cdata (metadata) for a page.

 	* @param string Page ID

 	* @param string Namespace

 	* @return array

 	*/

	function get_cdata($page_id, $namespace)

	{

		global $db, $session, $paths, $template, $plugins; // Common objects

		$pathskey = $this->get_pathskey($page_id, $namespace);

		if ( isset($this->pages[$pathskey]) )

			return $this->pages[$pathskey];

		$page = namespace_factory($page_id, $namespace);

		$cdata = $page->get_cdata();

		$this->pages[$pathskey] = $cdata;

		return $cdata;

	}

	/**

 	* For a given page ID and namespace, generate a flat string that can be used to access $paths->pages.

 	* @param string Page ID

 	* @param string Namespace

 	*/

	function get_pathskey($page_id, $namespace)

	{

		return ( isset($this->nslist[$namespace]) ) ? "{$this->nslist[$namespace]}{$page_id}" : "{$namespace}:{$page_id}";

	}

	function add_page($flags)

	{

		global $lang;

		$flags['urlname_nons'] = $flags['urlname'];

		$flags['urlname'] = $this->nslist[$flags['namespace']] . $flags['urlname']; // Applies the User:/File:/etc prefixes to the URL names

		if ( is_object($lang) )

		{

			if ( preg_match('/^[a-z0-9]+_[a-z0-9_]+$/', $flags['name']) )

				$flags['name'] = $lang->get($flags['name']);

		}

		$flags['require_admin'] = ( $flags['namespace'] === 'Admin' );

		$flags['page_exists'] = true;

		$this->pages[$flags['urlname']] = $flags;

	}

	function main_page()

	{

		if( is_string(get_main_page()) )

		{

			$main_page = makeUrl(get_main_page());

		}

		else

		{

			$main_page = makeUrl($this->pages[0]['urlname']);

		}

		redirect($main_page, 'Redirecting...', 'Invalid request, redirecting to main page', 0);

		exit;

	}

	function sysmsg($n)

	{

		global $db, $session, $paths, $template, $plugins; // Common objects

		static $sm_cache = array();

		if ( isset($sm_cache[$n]) )

			return $sm_cache[$n];

		// sometimes this gets called during die_semicritical()...

		if ( !is_object($db) )

			return false;

		if ( !@$db->_conn )

			return false;

		$q = $db->sql_query('SELECT page_text, char_tag FROM '.table_prefix.'page_text WHERE page_id=\''.$db->escape(sanitize_page_id($n)).'\' AND namespace=\'System\'');

		if( !$q )

		{

			$db->_die('Error during generic selection of system page data.');

		}

		if($db->numrows() < 1)

		{

			return false;

			//$db->_die('Error during generic selection of system page data: there were no rows in the text table that matched the page text query.');

		}

		$r = $db->fetchrow();

		$db->free_result();

		$message = $r['page_text'];

		$message = preg_replace('/<noinclude>(.*?)<\/noinclude>/is', '', $message);

		$message = preg_replace('/<nodisplay>(.*?)<\/nodisplay>/is', '\\1', $message);

		$sm_cache[$n] = $message;

		return $message;

	}

	function get_pageid_from_url()

	{

		return get_title(true, true);

	}

	// Parses a (very carefully formed) array into Javascript code compatible with the Tigra Tree Menu used in the admin menu

	function parseAdminTree() 

	{

		global $lang;

		$k = array_keys($this->admin_tree);

		$i = 0;

		$ret = '';

		$icon = $this->make_sprite_icon(4, 2);

		$ret .= "var TREE_ITEMS = ";

		$tree = array(

				array($icon . $lang->get('adm_btn_home'), "javascript:ajaxPage('{$this->nslist['Admin']}Home');")

			);

		$root =& $tree[0];

		foreach($k as $key)

		{

			$i++;

			$name = $lang->get($key);

			$group = array($name, "javascript:trees[0].toggle($i)");

			foreach($this->admin_tree[$key] as $nodeid => $c)

			{

				$i++;

				$name = $lang->get($c['name']);

				if ( $c['icon'] && $c['icon'] != cdnPath . '/images/spacer.gif' )

				{

					if ( is_array($c['icon']) )

					{

						// this is a sprite reference

						list($ix, $iy) = $c['icon'];

						$icon = $this->make_sprite_icon($ix, $iy);

					}

					else

					{

						$icon = "<img alt=\"\" src=\"{$c['icon']}\" style=\"border-width: 0; margin-right: 3px;\" /> ";

					}

				}

				else

				{