<?php

/*

 * Enano - an open-source CMS capable of wiki functions, Drupal-like sidebar blocks, and everything in between

 * Version 1.1.3 (Caoineag alpha 3)

 * Copyright (C) 2006-2007 Dan Fuhry

 *

 * This program is Free Software; you can redistribute and/or modify it under the terms of the GNU General Public License

 * as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

 *

 * This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied

 * warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for details.

 */

global $db, $session, $paths, $template, $plugins; // Common objects

$plugins->attachHook('session_started', '

  global $paths;

    $paths->add_page(Array(

      \'name\'=>\'specialpage_create_page\',

      \'urlname\'=>\'CreatePage\',

      \'namespace\'=>\'Special\',

      \'special\'=>0,\'visible\'=>1,\'comments_on\'=>0,\'protected\'=>1,\'delvotes\'=>0,\'delvote_ips\'=>\'\',

      ));

    $paths->add_page(Array(

      \'name\'=>\'specialpage_all_pages\',

      \'urlname\'=>\'AllPages\',

      \'namespace\'=>\'Special\',

      \'special\'=>0,\'visible\'=>1,\'comments_on\'=>0,\'protected\'=>1,\'delvotes\'=>0,\'delvote_ips\'=>\'\',

      ));

    $paths->add_page(Array(

      \'name\'=>\'specialpage_special_pages\',

      \'urlname\'=>\'SpecialPages\',

      \'namespace\'=>\'Special\',

      \'special\'=>0,\'visible\'=>1,\'comments_on\'=>0,\'protected\'=>1,\'delvotes\'=>0,\'delvote_ips\'=>\'\',

      ));

    $paths->add_page(Array(

      \'name\'=>\'specialpage_about_enano\',

      \'urlname\'=>\'About_Enano\',

      \'namespace\'=>\'Special\',

      \'special\'=>0,\'visible\'=>1,\'comments_on\'=>0,\'protected\'=>1,\'delvotes\'=>0,\'delvote_ips\'=>\'\',

      ));

    $paths->add_page(Array(

      \'name\'=>\'specialpage_gnu_gpl\',

      \'urlname\'=>\'GNU_General_Public_License\',

      \'namespace\'=>\'Special\',

      \'special\'=>0,\'visible\'=>1,\'comments_on\'=>0,\'protected\'=>1,\'delvotes\'=>0,\'delvote_ips\'=>\'\',

      ));

    $paths->add_page(Array(

      \'name\'=>\'specialpage_tag_cloud\',

      \'urlname\'=>\'TagCloud\',

      \'namespace\'=>\'Special\',

      \'special\'=>0,\'visible\'=>1,\'comments_on\'=>0,\'protected\'=>1,\'delvotes\'=>0,\'delvote_ips\'=>\'\',

      ));

    ');

// function names are IMPORTANT!!! The name pattern is: page_<namespace ID>_<page URLname, without namespace>

function page_Special_CreatePage()

{

  global $db, $session, $paths, $template, $plugins; // Common objects

  global $lang;

  $whitelist_ns = array('Article', 'User', 'Help', 'Template', 'Category', 'Project');

  $code = $plugins->setHook('page_create_ns_whitelist');

  foreach ( $code as $cmd )

  {

    eval($cmd);

  }

  $errors = array();

  switch ( isset($_POST['page_title']) )

  {

    case true:

      // "Create page" was clicked

      //

      // VALIDATION CODE

      //

      // Check namespace

      $namespace = ( isset($_POST['namespace']) ) ? $_POST['namespace'] : 'Article';

      if ( !in_array($namespace, $whitelist_ns) )

      {

        $errors[] = $lang->get('pagetools_create_err_invalid_namespace');

      }

      // Check title and figure out urlname

      $title = $_POST['page_title'];

      $urlname = $_POST['page_title'];

      if ( @$_POST['custom_url'] === 'yes' && isset($_POST['urlname']) )

      {

        $urlname = $_POST['urlname'];

      }

      $urlname = sanitize_page_id($urlname);

      if ( $urlname == '.00' || empty($urlname) )

      {

        $errors[] = $lang->get('pagetools_create_err_invalid_urlname');

      }

      // Validate page existence

      $pathskey = $paths->nslist[$namespace] . $urlname;

      if ( isPage($pathskey) )

      {

        $errors[] = $lang->get('pagetools_create_err_already_exists');

      }

      // Validate permissions

      $perms = $session->fetch_page_acl($urlname, $namespace);

      if ( !$perms->get_permissions('create_page') )

      {

        $errors[] = $lang->get('pagetools_create_err_no_permission');

      }

      // Run hooks

      $code = $plugins->setHook('page_create_request');

      foreach ( $code as $cmd )

      {

        eval($cmd);

      }

      // Create the page

      if ( count($errors) < 1 )

      {

        $page = new PageProcessor($urlname, $namespace);

        $page->create_page($title);

        if ( $error = $page->pop_error() )

        {

          do

          {

            $errors[] = $error;

          }

          while ( $error = $page->pop_error() );

        }

        else

        {

          redirect(makeUrlNS($namespace, $urlname) . '#do:edit', '', '', 0);

          return true;

        }

      }

      break;

  }

  $template->header();

  echo $lang->get('pagetools_create_blurb');

  if ( count($errors) > 0 )

  {

    echo '<div class="error-box">' . implode("<br />\n        ", $errors) . '</div>';

  }

  ?>

  <enano:no-opt>

  <script type="text/javascript">

    function cpGenPreviewUrl()

    {

      var frm = document.forms['create_form'];

      var radio_custom = frm.getElementsByTagName('input')[2];

      var use_custom_url = radio_custom.checked;

      if ( use_custom_url )

      {

        var title_src = frm.urlname.value;

      }

      else

      {

        var title_src = frm.page_title.value;

      }

      var url = window.location.protocol + '//' + window.location.hostname + contentPath + namespace_list[frm.namespace.value] + sanitize_page_id(title_src);

      document.getElementById('createpage_url_preview').firstChild.nodeValue = url;

    }

  </script>

  </enano:no-opt>

  <?php

  echo '<form action="' . makeUrlNS('Special', 'CreatePage') . '" method="post" name="create_form">';

  echo '<p>';

    echo $lang->get('pagetools_create_field_title');

    echo ' <input onkeyup="cpGenPreviewUrl();" type="text" name="page_title" size="40" tabindex="1" />';

    echo '</p>';

  echo '<p>';

    echo $lang->get('pagetools_create_field_namespace');

    echo ' <select onchange="cpGenPreviewUrl();" name="namespace" tabindex="2">';

    foreach ( $paths->nslist as $ns => $ns_prefix )

    {

      if ( !in_array($ns, $whitelist_ns) )

        continue;

      $lang_string = 'onpage_lbl_page_' . strtolower($ns);

      $str = $lang->get($lang_string);

      if ( $str == $lang_string )

        $str = $ns;

      echo '<option value="' . $ns . '">' . ucwords($str) . '</option>';

    }

    echo '</select>';

    echo '</p>';

  echo '<fieldset enano:expand="closed">';

  echo '<legend>' . $lang->get('pagetools_create_group_advanced') . '</legend>';

  echo '<p>';

    echo '<label><input tabindex="3" type="radio" name="custom_url" value="no" checked="checked" onclick="cpGenPreviewUrl(); document.getElementById(\'createpage_custom_url\').style.display = \'none\';" /> ' . $lang->get('pagetools_create_field_url_auto') . '</label>';

    echo '</p>';

  echo '<p>';

    echo '<label><input tabindex="3" type="radio" name="custom_url" value="yes" onclick="cpGenPreviewUrl(); document.getElementById(\'createpage_custom_url\').style.display = \'block\';" /> ' . $lang->get('pagetools_create_field_url_manual') . '</label>';

    echo '</p>';

  echo '<p id="createpage_custom_url" style="display: none; margin-left: 2em;">';

    echo $lang->get('pagetools_create_field_url');

    echo ' <input onkeyup="cpGenPreviewUrl();" tabindex="4" type="text" name="urlname" value="" size="40" />';

    echo '</p>';

  echo '<p>';

    echo $lang->get('pagetools_create_field_preview') . ' <tt id="createpage_url_preview"> </tt><br />';

    echo '<small>' . $lang->get('pagetools_create_field_preview_hint') . '</small>';

    echo '</p>';

  echo '</fieldset>';

  echo '<p>';

    echo '<input tabindex="5" type="submit" value="' . $lang->get('pagetools_create_btn_create') . '" />';

    echo '</p>';

  echo '</form>';

  echo '<script type="text/javascript">cpGenPreviewUrl();</script>';

  $template->footer();

}

function page_Special_CreatePage_Old()

{

  global $db, $session, $paths, $template, $plugins; // Common objects

  global $lang;

  if ( isset($_POST['do']) )

  {

    $p = $_POST['pagename'];

    $k = array_keys($paths->nslist);

    for ( $i = 0; $i < sizeof( $paths->nslist ); $i++ )

    {

      $ln = strlen( $paths->nslist[$k[$i]] );

      if ( substr($p, 0, $ln) == $paths->nslist[$k[$i]] )

      {

        $namespace = $k[$i];

      }

    }

    if ( $namespace == 'Special' || ( $namespace == 'System' && $session->user_level < USER_LEVEL_ADMIN ) || $namespace == 'Admin')

    {

      $template->header();

      echo '<h3>' . $lang->get('pagetools_create_err_title') . '</h3>

             <p>' . $lang->get('pagetools_create_err_name_invalid', array('page_name' => htmlspecialchars($p))) . '</p>';

      $template->footer();

      $db->close();

      exit;

    }

    $name = $db->escape(str_replace('_', ' ', $p));

    $urlname = str_replace(' ', '_', $p);

    $namespace = $_POST['namespace'];

    if ( $namespace == 'Special' || ( $namespace == 'System' && $session->user_level < USER_LEVEL_ADMIN ) || $namespace == 'Admin')

    {

      $template->header();

      echo '<h3>' . $lang->get('pagetools_create_err_title') . '</h3>

             <p>' . $lang->get('pagetools_create_err_name_invalid', array('page_name' => htmlspecialchars($paths->nslist[$namespace].$p))) . '</p>';

      $template->footer();

      $db->close();

      exit;

    }

    $code = $plugins->setHook('page_create_request');

    foreach ( $code as $cmd )

    {

      eval($cmd);

    }

    if ( substr($urlname, 0, 8) == 'Project:' )

    {

      $template->header();

      echo '<h3>' . $lang->get('pagetools_create_err_title') . '</h3>

             <p>' . $lang->get('pagetools_create_err_project_shortcut', array('page_name' => htmlspecialchars($p))) . '</p>';

      $template->footer();

      $db->close();

      exit;

    }

    $tn = $paths->nslist[$_POST['namespace']] . $urlname;

    if ( isset($paths->pages[$tn]) )

    {

      die_friendly($lang->get('pagetools_create_err_title'), '<p>' . $lang->get('pagetools_create_err_already_exist') . '</p>');

    }

    if ( $paths->nslist[$namespace] == substr($urlname, 0, strlen($paths->nslist[$namespace]) ) )

    {

      $urlname = substr($urlname, strlen($paths->nslist[$namespace]), strlen($urlname));

    }

    $k = array_keys( $paths->nslist );

    if(!in_array($_POST['namespace'], $k))

    {

      $db->_die('An SQL injection attempt was caught at '.dirname(__FILE__).':'.__LINE__.'.');

    }

    $ips = array(

      'ip' => array(),

      'u' => array()

      );

    $ips = $db->escape(serialize($ips));

    $urlname = sanitize_page_id($urlname);

    $urlname = $db->escape($urlname);

    $perms = $session->fetch_page_acl($urlname, $namespace);

    if ( !$perms->get_permissions('create_page') )

      die_friendly($lang->get('pagetools_create_err_title'), '<p>An access control rule is preventing you from creating pages.</p>');

    $q = $db->sql_query('INSERT INTO '.table_prefix.'logs(time_id,date_string,log_type,action,author,page_id,namespace) VALUES('.time().', \''.enano_date('d M Y h:i a').'\', \'page\', \'create\', \''.$session->username.'\', \''.$urlname.'\', \''.$_POST['namespace'].'\');');

    if ( !$q )

    {

      $db->_die('The page log could not be updated.');

    }

    $q = $db->sql_query('INSERT INTO '.table_prefix.'pages(name,urlname,namespace,delvote_ips) VALUES(\''.$name.'\', \''.$urlname.'\', \''.$_POST['namespace'].'\',\'' . $ips . '\');');

    if ( !$q )

    {

      $db->_die('The page entry could not be inserted.');

    }

    $q = $db->sql_query('INSERT INTO '.table_prefix.'page_text(page_id,namespace,page_text) VALUES(\''.$urlname.'\', \''.$_POST['namespace'].'\', \''.'\');');

    if ( !$q )

    {

      $db->_die('The page text entry could not be inserted.');

    }

    header('Location: '.makeUrlNS($_POST['namespace'], sanitize_page_id($p)) . '#do:edit');

    exit;

  }

  $template->header();

  /*

  if ( !$session->get_permissions('create_page') )

  {

    echo 'Wiki mode is disabled, only admins can create pages.';

    $template->footer();

    $db->close();

    exit;

  }

  */

  echo '<p>' . $lang->get('pagetools_create_blurb') . '</p>';

  ?>

  <form action="" method="post">

    <p>

      <select name="namespace">

        <?php

        $k = array_keys($paths->nslist);

        for ( $i = 0; $i < sizeof($k); $i++ )

        {

          if ( $paths->nslist[$k[$i]] == '' )

          {

            $s = $lang->get('pagetools_create_namespace_none');

          }

          else

          {

            $s = $paths->nslist[$k[$i]];

          }

          if ( ( $k[$i] != 'System' || $session->user_level >= USER_LEVEL_ADMIN ) && $k[$i] != 'Admin' && $k[$i] != 'Special')

          {

            echo '<option value="'.$k[$i].'">'.$s.'</option>';

          }

        }

        ?>

      </select> <input type="text" name="pagename" /></p>

      <p><input type="submit" name="do" value="<?php echo $lang->get('pagetools_create_btn_create'); ?>" /></p>

  </form>

  <?php

  $template->footer();

}

function PagelistingFormatter($id, $row)

{

  global $db, $session, $paths, $template, $plugins; // Common objects

  static $rowtracker = 0;

  static $tdclass = 'row2';

  static $per_row = 2;

  static $first = true;

  $return = '';

  if ( $id === false && $row === false )

  {

    $rowtracker = 0;

    $first = true;

    return false;

  }

  $rowtracker++;

  if ( $rowtracker == $per_row || $first )

  {

    $rowtracker = 0;

    $tdclass = ( $tdclass == 'row2' ) ? 'row1' : 'row2';

  }

  if ( $rowtracker == 0 && !$first )

    $return .= "</tr>\n<tr>";

  $first = false;

  preg_match('/^ns=(' . implode('|', array_keys($paths->nslist)) . ');pid=(.*?)$/i', $id, $match);

  $namespace =& $match[1];

  $page_id   =& $match[2];

  $page_id   = sanitize_page_id($page_id);

  $url = makeUrlNS($namespace, $page_id);

  $url = htmlspecialchars($url);

  $link = '<a href="' . $url . '">' . htmlspecialchars($row['name']) . '</a>';

  $td = '<td class="' . $tdclass . '" style="width: 50%;">' . $link . '</td>';

  $return .= $td;

  return $return;

}

function page_Special_AllPages() 

{

  // This should be an easy one

  global $db, $session, $paths, $template, $plugins; // Common objects

  global $lang;

  $template->header();

  $sz = sizeof( $paths->pages ) / 2;

  echo '<p>' . $lang->get('pagetools_allpages_blurb') . '</p>';

  $q = $db->sql_query('SELECT COUNT(urlname) FROM '.table_prefix.'pages WHERE visible!=0;');

  if ( !$q )

    $db->_die();

  $row = $db->fetchrow_num();

  $count = $row[0];

  switch($count % 4)

  {

    case 0:

    case 2:

      // even number of results; do nothing

      $last_cell = '';

      break;

    case 1:

      // odd number of results and odd number of rows, use row1

      $last_cell = '<td class="row1"></td>';

      break;

    case 3:

      // odd number of results and even number of rows, use row2

      $last_cell = '<td class="row2"></td>';

      break;

  }

  $db->free_result();

  $q = $db->sql_unbuffered_query('SELECT CONCAT("ns=",namespace,";pid=",urlname) AS identifier, name FROM '.table_prefix.'pages WHERE visible!=0 ORDER BY name ASC;');

  if ( !$q )

    $db->_die();

  $offset = ( isset($_GET['offset']) ) ? intval($_GET['offset']) : 0;

  // reset formatter

  PagelistingFormatter(false, false);

  $result = paginate(

      $q,                  // result resource

      '{identifier}',      // formatting template

      $count,              // # of results

      makeUrlNS('Special', 'AllPages', 'offset=%s'), // result URL

      $offset,             // start offset

      40,                  // results per page

      array( 'identifier' => 'PagelistingFormatter' ), // hooks

      '<div class="tblholder">

         <table border="0" cellspacing="1" cellpadding="4">

           <tr>',          // print at start