1 <?php

     2 

     3 /*

     4  * Enano - an open-source CMS capable of wiki functions, Drupal-like sidebar blocks, and everything in between

     5  * Version 1.0 (Banshee)

     6  * Copyright (C) 2006-2007 Dan Fuhry

     7  *

     8  * This program is Free Software; you can redistribute and/or modify it under the terms of the GNU General Public License

     9  * as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

    10  *

    11  * This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied

    12  * warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for details.

    13  */

    14  

    15 class template {

    16   var $tpl_strings, $tpl_bool, $theme, $style, $no_headers, $additional_headers, $sidebar_extra, $sidebar_widgets, $toolbar_menu, $theme_list, $named_theme_list, $default_theme, $default_style, $plugin_blocks, $namespace_string, $style_list, $theme_loaded;

    17   function __construct()

    18   {

    19     global $db, $session, $paths, $template, $plugins; // Common objects

    20     dc_here('template: initializing all class variables');

    21     $this->tpl_bool    = Array();

    22     $this->tpl_strings = Array();

    23     $this->sidebar_extra = '';

    24     $this->toolbar_menu = '';

    25     $this->additional_headers = '';

    26     $this->plugin_blocks = Array();

    27     $this->theme_loaded = false;

    28     

    29     $this->theme_list = Array();

    30     $this->named_theme_list = Array();

    31     $e = $db->sql_query('SELECT theme_id,theme_name,enabled,default_style FROM '.table_prefix.'themes WHERE enabled=1 ORDER BY theme_order;');

    32     if(!$e) $db->_die('The list of themes could not be selected.');

    33     for($i=0;$i < $db->numrows(); $i++)

    34     {

    35       $this->theme_list[$i] = $db->fetchrow();

    36       $this->named_theme_list[$this->theme_list[$i]['theme_id']] = $this->theme_list[$i];

    37     }

    38     $db->free_result();

    39     $this->default_theme = $this->theme_list[0]['theme_id'];

    40     $dir = ENANO_ROOT.'/themes/'.$this->default_theme.'/css/';

    41     $list = Array();

    42     // Open a known directory, and proceed to read its contents

    43     if (is_dir($dir)) {

    44       if ($dh = opendir($dir)) {

    45         while (($file = readdir($dh)) !== false) {

    46           if(preg_match('#^(.*?)\.css$#i', $file) && $file != '_printable.css') {

    47             $list[] = substr($file, 0, strlen($file)-4);

    48           }

    49         }

    50         closedir($dh);

    51       }

    52     }

    53     

    54     $def = ENANO_ROOT.'/themes/'.$this->default_theme.'/css/'.$this->named_theme_list[$this->default_theme]['default_style'];

    55     if(file_exists($def))

    56     {

    57       $this->default_style = substr($this->named_theme_list[$this->default_theme]['default_style'], 0, strlen($this->named_theme_list[$this->default_theme]['default_style'])-4);

    58     } else {

    59       $this->default_style = $list[0];

    60     }

    61     

    62     $this->style_list = $list;

    63     

    64   }

    65   function template()

    66   {

    67     $this->__construct();

    68   }

    69   function sidebar_widget($t, $h)

    70   {

    71     global $db, $session, $paths, $template, $plugins; // Common objects

    72     if(!defined('ENANO_TEMPLATE_LOADED'))

    73     {

    74       $this->load_theme($session->theme, $session->style);

    75     }

    76     if(!$this->sidebar_widgets)

    77       $this->sidebar_widgets = '';

    78     $tplvars = $this->extract_vars('elements.tpl');

    79     $parser = $this->makeParserText($tplvars['sidebar_section_raw']);

    80     $parser->assign_vars(Array('TITLE'=>$t,'CONTENT'=>$h));

    81     $this->plugin_blocks[$t] = $h;

    82     $this->sidebar_widgets .= $parser->run();

    83   }

    84   function add_header($html)

    85   {

    86     $this->additional_headers .= "\n" . $html;

    87   }

    88   function get_css($s = false)

    89   {

    90     global $db, $session, $paths, $template, $plugins; // Common objects

    91     if(!defined('ENANO_TEMPLATE_LOADED'))

    92       $this->load_theme($session->theme, $session->style);

    93     $path = ( $s ) ? 'css/'.$s : 'css/'.$this->style.'.css';

    94     if ( !file_exists(ENANO_ROOT . '/themes/' . $this->theme . '/' . $path) )

    95     {

    96       echo "/* WARNING: Falling back to default file because file $path does not exist */\n";

    97       $path = 'css/' . $this->style_list[0] . '.css';

    98     }

    99     return $this->process_template($path);

   100   }

   101   function load_theme($name = false, $css = false)

   102   {

   103     global $db, $session, $paths, $template, $plugins; // Common objects

   104     $this->theme = ( $name ) ? $name : $session->theme;

   105     $this->style = ( $css ) ? $css : $session->style;

   106     if ( !$this->theme )

   107     {

   108       $this->theme = $this->theme_list[0]['theme_id'];

   109       $this->style = substr($this->theme_list[0]['default_style'], 0, strlen($this->theme_list[0]['default_style'])-4);

   110     }

   111     $this->theme_loaded = true;

   112   }

   113   

   114   function init_vars()

   115   {

   116     global $db, $session, $paths, $template, $plugins; // Common objects

   117     global $email;

   118     

   119     dc_here("template: initializing all variables");

   120     

   121     if(!$this->theme || !$this->style)

   122     {

   123       $this->load_theme();

   124     }

   125     

   126     if(defined('ENANO_TEMPLATE_LOADED'))

   127     {

   128       dc_here('template: access denied to call template::init_vars(), bailing out');

   129       die_semicritical('Illegal call', '<p>$template->load_theme was called multiple times, this is not supposed to happen. Exiting with fatal error.</p>');

   130     }

   131     

   132     define('ENANO_TEMPLATE_LOADED', '');

   133     

   134     $tplvars = $this->extract_vars('elements.tpl');

   135     

   136     dc_here('template: setting all template vars');

   137     

   138     if(isset($_SERVER['HTTP_USER_AGENT']) && strstr($_SERVER['HTTP_USER_AGENT'], 'MSIE'))

   139     {

   140       $this->add_header('

   141         <!--[if lt IE 7]>

   142         <script language="JavaScript">

   143         function correctPNG() // correctly handle PNG transparency in Win IE 5.5 & 6.

   144         {

   145            var arVersion = navigator.appVersion.split("MSIE")

   146            var version = parseFloat(arVersion[1])

   147            if (version >= 5.5 && typeof(document.body.filters) == "object")

   148            {

   149               for(var i=0; i<document.images.length; i++)

   150               {

   151                  var img = document.images[i];

   152                  continue;

   153                  var imgName = img.src.toUpperCase();

   154                  if (imgName.substring(imgName.length-3, imgName.length) == "PNG")

   155                  {

   156                     var imgID = (img.id) ? "id=\'" + img.id + "\' " : "";

   157                     var imgClass = (img.className) ? "class=\'" + img.className + "\' " : "";

   158                     var imgTitle = (img.title) ? "title=\'" + img.title + "\' " : "title=\'" + img.alt + "\' ";

   159                     var imgStyle = "display:inline-block;" + img.style.cssText;

   160                     if (img.align == "left") imgStyle = "float:left;" + imgStyle;

   161                     if (img.align == "right") imgStyle = "float:right;" + imgStyle;

   162                     if (img.parentElement.href) imgStyle = "cursor:hand;" + imgStyle;

   163                     var strNewHTML = "<span " + imgID + imgClass + imgTitle + " style=\\"" + "width:" + img.width + "px; height:" + img.height + "px;" + imgStyle + ";" + "filter:progid:DXImageTransform.Microsoft.AlphaImageLoader" + "(src=\\\'" + img.src + "\\\', sizingMethod=\'scale\');\\"></span>";

   164                     img.outerHTML = strNewHTML;

   165                     i = i-1;

   166                  }

   167               }

   168            }   

   169         }

   170         window.attachEvent("onload", correctPNG);

   171         </script>

   172         <![endif]-->

   173         ');

   174     }

   175     

   176     // Get the "article" button text (depends on namespace)

   177     switch($paths->namespace) {

   178       case "Article":

   179       default:

   180         $ns = 'article';

   181         break;

   182       case "Admin":

   183         $ns = 'administration page';

   184         break;

   185       case "System":

   186         $ns = 'system message';

   187         break;

   188       case "File":

   189         $ns = 'uploaded file';

   190         break;

   191       case "Help":

   192         $ns = 'documentation page';

   193         break;

   194       case "User":

   195         $ns = 'user page';

   196         break;

   197       case "Special":

   198         $ns = 'special page';

   199         break;

   200       case "Template":

   201         $ns = 'template';

   202         break;

   203       case "Project":

   204         $ns = 'project page';

   205         break;

   206       case "Category":

   207         $ns = 'category';

   208         break;

   209     }

   210     $this->namespace_string = $ns;

   211     $code = $plugins->setHook('page_type_string_set');

   212     foreach ( $code as $cmd )

   213     {

   214       eval($cmd);

   215     }

   216     $ns =& $this->namespace_string;

   217     

   218     // Initialize the toolbar

   219     $tb = '';

   220     

   221     // Create "xx page" button

   222     

   223     $btn_selected = ( isset($tplvars['toolbar_button_selected'])) ? $tplvars['toolbar_button_selected'] : $tplvars['toolbar_button'];

   224     $parser = $this->makeParserText($btn_selected);

   225     

   226     $parser->assign_vars(array(

   227         'FLAGS' => 'onclick="void(ajaxReset()); return false;" title="View the page contents, all of the page contents, and nothing but the page contents (alt-a)" accesskey="a"',

   228         'PARENTFLAGS' => 'id="mdgToolbar_article"',

   229         'HREF' => makeUrl($paths->page, null, true),

   230         'TEXT' => $this->namespace_string

   231       ));

   232     

   233     $tb .= $parser->run();

   234     

   235     $button = $this->makeParserText($tplvars['toolbar_button']);

   236     

   237     // Page toolbar

   238     // Comments button

   239     if ( $session->get_permissions('read') && getConfig('enable_comments')=='1' && $paths->namespace != 'Special' && $paths->namespace != 'Admin' && $paths->cpage['comments_on'] == 1 )

   240     {

   241       

   242       $e = $db->sql_query('SELECT approved FROM '.table_prefix.'comments WHERE page_id=\''.$paths->cpage['urlname_nons'].'\' AND namespace=\''.$paths->namespace.'\';');

   243       if ( !$e )

   244       {

   245         $db->_die();

   246       }

   247       $nc = $db->numrows();

   248       $nu = 0;

   249       $na = 0;

   250       

   251       while ( $r = $db->fetchrow() )

   252       {  

   253         if ( !$r['approved'] )

   254         {

   255           $nu++;

   256         }

   257         else

   258         {

   259           $na++;

   260         }

   261       }

   262       

   263       $db->free_result();

   264       $n = ( $session->get_permissions('mod_comments') ) ? (string)$nc : (string)$na;

   265       if ( $session->get_permissions('mod_comments') && $nu > 0 )

   266       {

   267         $n .= ' total/'.$nu.' unapp.';

   268       }

   269       

   270       $button->assign_vars(array(

   271           'FLAGS' => 'onclick="void(ajaxComments()); return false;" title="View the comments that other users have posted about this page (alt-c)" accesskey="c"',

   272           'PARENTFLAGS' => 'id="mdgToolbar_discussion"',

   273           'HREF' => makeUrl($paths->page, 'do=comments', true),

   274           'TEXT' => 'discussion ('.$n.')',

   275         ));

   276       

   277       $tb .= $button->run();

   278     }

   279     // Edit button

   280     if($session->get_permissions('read') && ($paths->namespace != 'Special' && $paths->namespace != 'Admin') && ( $session->get_permissions('edit_page') && ( ( $paths->page_protected && $session->get_permissions('even_when_protected') ) || !$paths->page_protected ) ) )

   281     {

   282       $button->assign_vars(array(

   283         'FLAGS' => 'onclick="void(ajaxEditor()); return false;" title="Edit the contents of this page (alt-e)" accesskey="e"',

   284         'PARENTFLAGS' => 'id="mdgToolbar_edit"',

   285         'HREF' => makeUrl($paths->page, 'do=edit', true),

   286         'TEXT' => 'edit this page'

   287         ));

   288       $tb .= $button->run();

   289     // View source button

   290     }

   291     else if($session->get_permissions('view_source') && ( !$session->get_permissions('edit_page') || !$session->get_permissions('even_when_protected') && $paths->page_protected ) && $paths->namespace != 'Special' && $paths->namespace != 'Admin') 

   292     {

   293       $button->assign_vars(array(

   294         'FLAGS' => 'onclick="void(ajaxViewSource()); return false;" title="View the source code (wiki markup) that this page uses (alt-e)" accesskey="e"',

   295         'PARENTFLAGS' => 'id="mdgToolbar_edit"',

   296         'HREF' => makeUrl($paths->page, 'do=viewsource', true),

   297         'TEXT' => 'view source'

   298         ));

   299       $tb .= $button->run();

   300     }

   301     // History button

   302     if ( $session->get_permissions('read') /* && $paths->wiki_mode */ && $paths->page_exists && $paths->namespace != 'Special' && $paths->namespace != 'Admin' && $session->get_permissions('history_view') )

   303     {

   304       $button->assign_vars(array(

   305         'FLAGS'       => 'onclick="void(ajaxHistory()); return false;" title="View a log of actions taken on this page (alt-h)" accesskey="h"',

   306         'PARENTFLAGS' => 'id="mdgToolbar_history"',

   307         'HREF'        => makeUrl($paths->page, 'do=history', true),

   308         'TEXT'        => 'history'

   309         ));

   310       $tb .= $button->run();

   311     }

   312     

   313     $menubtn = $this->makeParserText($tplvars['toolbar_menu_button']);

   314     

   315     // Additional actions menu

   316     // Rename button

   317     if ( $session->get_permissions('read') && $paths->page_exists && ( $session->get_permissions('rename') && ( $paths->page_protected && $session->get_permissions('even_when_protected') || !$paths->page_protected ) ) && $paths->namespace != 'Special' && $paths->namespace != 'Admin' )

   318     {

   319       $menubtn->assign_vars(array(

   320           'FLAGS' => 'onclick="void(ajaxRename()); return false;" title="Change the display name of this page (alt-r)" accesskey="r"',

   321           'HREF'  => makeUrl($paths->page, 'do=rename', true),

   322           'TEXT'  => 'rename',

   323         ));

   324       $this->toolbar_menu .= $menubtn->run();

   325     }

   326     

   327     // Vote-to-delete button

   328     if ( $paths->wiki_mode && $session->get_permissions('vote_delete') && $paths->page_exists && $paths->namespace != 'Special' && $paths->namespace != 'Admin')

   329     {

   330       $menubtn->assign_vars(array(

   331           'FLAGS' => 'onclick="void(ajaxDelVote()); return false;" title="Vote to have this page deleted (alt-d)" accesskey="d"',

   332           'HREF'  => makeUrl($paths->page, 'do=delvote', true),

   333           'TEXT'  => 'vote to delete this page',

   334         ));

   335       $this->toolbar_menu .= $menubtn->run();

   336     }

   337     

   338     // Clear-votes button

   339     if ( $session->get_permissions('read') && $paths->wiki_mode && $paths->page_exists && $paths->namespace != 'Special' && $paths->namespace != 'Admin' && $session->get_permissions('vote_reset') && $paths->cpage['delvotes'] > 0)

   340     {

   341       $menubtn->assign_vars(array(

   342           'FLAGS' => 'onclick="void(ajaxResetDelVotes()); return false;" title="Vote to have this page deleted (alt-y)" accesskey="y"',

   343           'HREF'  => makeUrl($paths->page, 'do=resetvotes', true),

   344           'TEXT'  => 'reset deletion votes',

   345         ));

   346       $this->toolbar_menu .= $menubtn->run();

   347     }

   348     

   349     // Printable page button

   350     if ( $paths->page_exists && $paths->namespace != 'Special' && $paths->namespace != 'Admin' )

   351     {

   352       $menubtn->assign_vars(array(

   353           'FLAGS' => 'title="View a version of this page that is suitable for printing"',

   354           'HREF'  => makeUrl($paths->page, 'printable=yes', true),

   355           'TEXT'  => 'view printable version',

   356         ));

   357       $this->toolbar_menu .= $menubtn->run();

   358     }

   359     

   360     // Protect button

   361     if($session->get_permissions('read') && $paths->wiki_mode && $paths->page_exists && $paths->namespace != 'Special' && $paths->namespace != 'Admin' && $session->get_permissions('protect'))

   362     {

   363       

   364       $label = $this->makeParserText($tplvars['toolbar_label']);

   365       $label->assign_vars(array('TEXT' => 'protection:'));

   366       $t0 = $label->run();

   367       

   368       $ctmp = ''; 

   369       if ( $paths->cpage['protected'] == 1 )

   370       {

   371         $ctmp=' style="text-decoration: underline;"';

   372       }

   373       $menubtn->assign_vars(array(

   374           'FLAGS' => 'accesskey="i" onclick="ajaxProtect(1); return false;" id="protbtn_1" title="Prevents all non-administrators from editing this page. [alt-i]"'.$ctmp,

   375           'HREF'  => makeUrl($paths->page, 'do=protect&level=1', true),

   376           'TEXT'  => 'on'

   377         ));

   378       $t1 = $menubtn->run();

   379       

   380       $ctmp = '';

   381       if ( $paths->cpage['protected'] == 0 )

   382       {

   383         $ctmp=' style="text-decoration: underline;"';

   384       }

   385       $menubtn->assign_vars(array(

   386           'FLAGS' => 'accesskey="o" onclick="ajaxProtect(0); return false;" id="protbtn_0" title="Allows everyone to edit this page. [alt-o]"'.$ctmp,

   387           'HREF'  => makeUrl($paths->page, 'do=protect&level=0', true),

   388           'TEXT'  => 'off'

   389         ));

   390       $t2 = $menubtn->run();

   391       

   392       $ctmp = '';

   393       if ( $paths->cpage['protected'] == 2 )

   394       {

   395         $ctmp = ' style="text-decoration: underline;"';

   396       }

   397       $menubtn->assign_vars(array(

   398           'FLAGS' => 'accesskey="p" onclick="ajaxProtect(2); return false;" id="protbtn_2" title="Allows only users who have been registered for 4 days to edit this page. [alt-p]"'.$ctmp,

   399           'HREF'  => makeUrl($paths->page, 'do=protect&level=2', true),

   400           'TEXT'  => 'semi'

   401         ));

   402       $t3 = $menubtn->run();

   403       

   404       $this->toolbar_menu .= '        <table border="0" cellspacing="0" cellpadding="0">

   405           <tr>

   406             <td>'.$t0.'</td>

   407             <td>'.$t1.'</td>

   408             <td>'.$t2.'</td>

   409             <td>'.$t3.'</td>

   410           </tr>

   411         </table>';

   412     }

   413     

   414     // Wiki mode button

   415     if($session->get_permissions('read') && $paths->page_exists && $session->get_permissions('set_wiki_mode') && $paths->namespace != 'Special' && $paths->namespace != 'Admin')

   416     {

   417       // label at start

   418       $label = $this->makeParserText($tplvars['toolbar_label']);

   419       $label->assign_vars(array('TEXT' => 'page wiki mode:'));

   420       $t0 = $label->run();

   421       

   422       // on button

   423       $ctmp = '';

   424       if ( $paths->cpage['wiki_mode'] == 1 )

   425       {

   426         $ctmp = ' style="text-decoration: underline;"';

   427       }

   428       $menubtn->assign_vars(array(

   429           'FLAGS' => 'onclick="ajaxSetWikiMode(1); return false;" id="wikibtn_1" title="Forces wiki functions to be allowed on this page."'.$ctmp,

   430           'HREF' => makeUrl($paths->page, 'do=setwikimode&level=1', true),

   431           'TEXT' => 'on'

   432         ));

   433       $t1 = $menubtn->run();

   434       

   435       // off button

   436       $ctmp = '';

   437       if ( $paths->cpage['wiki_mode'] == 0 )

   438       {

   439         $ctmp=' style="text-decoration: underline;"';

   440       }

   441       $menubtn->assign_vars(array(

   442           'FLAGS' => 'onclick="ajaxSetWikiMode(0); return false;" id="wikibtn_0" title="Forces wiki functions to be disabled on this page."'.$ctmp,

   443           'HREF' => makeUrl($paths->page, 'do=setwikimode&level=0', true),

   444           'TEXT' => 'off'

   445         ));

   446       $t2 = $menubtn->run();

   447       

   448       // global button

   449       $ctmp = ''; 

   450       if ( $paths->cpage['wiki_mode'] == 2 )

   451       {

   452         $ctmp=' style="text-decoration: underline;"';

   453       }

   454       $menubtn->assign_vars(array(

   455           'FLAGS' => 'onclick="ajaxSetWikiMode(2); return false;" id="wikibtn_2" title="Causes this page to use the global wiki mode setting (default)"'.$ctmp,

   456           'HREF' => makeUrl($paths->page, 'do=setwikimode&level=2', true),

   457           'TEXT' => 'global'

   458         ));

   459       $t3 = $menubtn->run();

   460       

   461       // Tack it onto the list of buttons that are already there...

   462       $this->toolbar_menu .= '        <table border="0" cellspacing="0" cellpadding="0">

   463           <tr>

   464             <td>'.$t0.'</td>

   465             <td>'.$t1.'</td>

   466             <td>'.$t2.'</td>

   467             <td>'.$t3.'</td>

   468           </tr>

   469         </table>';

   470     }

   471     

   472     // Clear logs button

   473     if ( $session->get_permissions('read') && $session->get_permissions('clear_logs') && $paths->wiki_mode && $paths->namespace != 'Special' && $paths->namespace != 'Admin' )

   474     {

   475       $menubtn->assign_vars(array(

   476           'FLAGS' => 'onclick="void(ajaxClearLogs()); return false;" title="Remove all edit and action logs for this page from the database. IRREVERSIBLE! (alt-l)" accesskey="l"',

   477           'HREF'  => makeUrl($paths->page, 'do=flushlogs', true),

   478           'TEXT'  => 'clear page logs',

   479         ));

   480       $this->toolbar_menu .= $menubtn->run();

   481     }

   482     

   483     // Delete page button

   484     if ( $session->get_permissions('read') && $session->get_permissions('delete_page') && $paths->page_exists && $paths->namespace != 'Special' && $paths->namespace != 'Admin' )

   485     {

   486       $s = 'delete this page';

   487       if ( $paths->cpage['delvotes'] == 1 )

   488       {

   489         $s .= ' (<b>'.$paths->cpage['delvotes'].'</b> vote)';

   490       }

   491       else if ( $paths->cpage['delvotes'] > 1 )

   492       {

   493         $s .= ' (<b>'.$paths->cpage['delvotes'].'</b> votes)';

   494       }

   495       

   496       $menubtn->assign_vars(array(

   497           'FLAGS' => 'onclick="void(ajaxDeletePage()); return false;" title="Delete this page. This is always reversible unless the logs are cleared. (alt-k)" accesskey="k"',

   498           'HREF'  => makeUrl($paths->page, 'do=deletepage', true),

   499           'TEXT'  => $s,

   500         ));

   501       $this->toolbar_menu .= $menubtn->run();

   502       

   503     }

   504     

   505     // Password-protect button

   506     if(isset($paths->cpage['password']))

   507     {

   508       if ( $paths->cpage['password'] == '' )

   509       {

   510         $a = $session->get_permissions('password_set');

   511       }

   512       else

   513       {

   514         $a = $session->get_permissions('password_reset');

   515       }

   516     }

   517     else

   518     {

   519       $a = $session->get_permissions('password_set');

   520     }

   521     if ( $a && $session->get_permissions('read') && $paths->page_exists && $paths->namespace != 'Special' && $paths->namespace != 'Admin' )

   522     {

   523       // label at start

   524       $label = $this->makeParserText($tplvars['toolbar_label']);

   525       $label->assign_vars(array('TEXT' => 'password:'));

   526       $t0 = $label->run();

   527       

   528       $menubtn->assign_vars(array(

   529           'FLAGS' => 'onclick="void(ajaxSetPassword()); return false;" title="Require a password in order for this page to be viewed"',

   530           'HREF'  => '#',

   531           'TEXT'  => 'set',

   532         ));

   533       $t = $menubtn->run();

   534       

   535       $this->toolbar_menu .= '<table border="0" cellspacing="0" cellpadding="0"><tr><td>'.$t0.'</td><td><input type="password" id="mdgPassSetField" size="10" /></td><td>'.$t.'</td></tr></table>';

   536     }

   537     

   538     // Manage ACLs button

   539     if($session->get_permissions('edit_acl') || $session->user_level >= USER_LEVEL_ADMIN)

   540     {

   541       $menubtn->assign_vars(array(

   542           'FLAGS' => 'onclick="return ajaxOpenACLManager();" title="Manage who can do what with this page (alt-m)" accesskey="m"',

   543           'HREF'  => makeUrl($paths->page, 'do=aclmanager', true),

   544           'TEXT'  => 'manage page access',

   545         ));

   546       $this->toolbar_menu .= $menubtn->run();

   547     }

   548     

   549     // Administer page button

   550     if ( $session->user_level >= USER_LEVEL_ADMIN && $paths->page_exists && $paths->namespace != 'Special' && $paths->namespace != 'Admin' )

   551     {

   552       $menubtn->assign_vars(array(

   553           'FLAGS' => 'onclick="void(ajaxAdminPage()); return false;" title="Administrative options for this page" accesskey="g"',

   554           'HREF'  => makeUrlNS('Special', 'Administration', 'module='.$paths->nslist['Admin'].'PageManager', true),

   555           'TEXT'  => 'administrative options',

   556         ));

   557       $this->toolbar_menu .= $menubtn->run();

   558     }

   559     

   560     if ( strlen($this->toolbar_menu) > 0 )

   561     {

   562       $button->assign_vars(array(

   563         'FLAGS'       => 'id="mdgToolbar_moreoptions" onclick="return false;" title="Additional options for working with this page"',

   564         'PARENTFLAGS' => '',

   565         'HREF'        => makeUrl($paths->page, 'do=moreoptions', true),

   566         'TEXT'        => 'more options'

   567         ));

   568       $tb .= $button->run();

   569     }

   570     

   571     $is_opera = (isset($_SERVER['HTTP_USER_AGENT']) && strstr($_SERVER['HTTP_USER_AGENT'], 'Opera')) ? true : false;

   572     

   573     $this->tpl_bool = Array(

   574       'auth_admin'=>$session->user_level >= USER_LEVEL_ADMIN ? true : false,

   575       'user_logged_in'=>$session->user_logged_in,

   576       'opera'=>$is_opera,

   577       );

   578     

   579     if($session->sid_super) { $ash = '&auth='.$session->sid_super; $asq = "?auth=".$session->sid_super; $asa = "&auth=".$session->sid_super; $as2 = htmlspecialchars(urlSeparator).'auth='.$session->sid_super; }

   580     else { $asq=''; $asa=''; $as2 = ''; $ash = ''; }

   581     

   582     $code = $plugins->setHook('compile_template');

   583     foreach ( $code as $cmd )

   584     {

   585       eval($cmd);

   586     }

   587     

   588     // Some additional sidebar processing

   589     if($this->sidebar_extra != '') {

   590       $se = $this->sidebar_extra;

   591       $parser = $this->makeParserText($tplvars['sidebar_section_raw']);

   592       $parser->assign_vars(Array('TITLE'=>'Links','CONTENT'=>$se));

   593       $this->sidebar_extra = $parser->run();

   594     }

   595     

   596     $this->sidebar_extra = $this->sidebar_extra.$this->sidebar_widgets;

   597     

   598     $this->tpl_bool['fixed_menus'] = false;

   599     /* if($this->sidebar_extra == '') $this->tpl_bool['right_sidebar'] = false;

   600     else */ $this->tpl_bool['right_sidebar'] = true;

   601     

   602     $this->tpl_bool['auth_rename'] = ( $paths->page_exists && ( $session->get_permissions('rename') && ( $paths->page_protected && $session->get_permissions('even_when_protected') || !$paths->page_protected ) ) && $paths->namespace != 'Special' && $paths->namespace != 'Admin');

   603     

   604     $this->tpl_bool['enable_uploads'] = ( getConfig('enable_uploads') == '1' && $session->get_permissions('upload_files') ) ? true : false;

   605     

   606     $this->tpl_bool['stupid_mode'] = false;

   607     

   608     if($paths->page == $paths->nslist['Special'].'Administration') $this->tpl_bool['in_admin'] = true;

   609     else $this->tpl_bool['in_admin'] = false;

   610     

   611     $p = ( isset($_GET['printable']) ) ? '/printable' : '';

   612     

   613     // Add the e-mail address client code to the header

   614     $this->add_header($email->jscode());

   615     

   616     // Generate the code for the Log out and Change theme sidebar buttons

   617     // Once again, the new template parsing system can be used here

   618     

   619     $parser = $this->makeParserText($tplvars['sidebar_button']);

   620     

   621     $parser->assign_vars(Array(

   622         'HREF'=>makeUrlNS('Special', 'Logout'),

   623         'FLAGS'=>'onclick="mb_logout(); return false;"',

   624         'TEXT'=>'Log out',

   625       ));

   626     

   627     $logout_link = $parser->run();

   628     

   629     $parser->assign_vars(Array(

   630         'HREF'=>makeUrlNS('Special', 'Login/' . $paths->page),

   631         'FLAGS'=>'onclick="ajaxStartLogin(); return false;"',

   632         'TEXT'=>'Log in',

   633       ));

   634     

   635     $login_link = $parser->run();

   636     

   637     $parser->assign_vars(Array(

   638         'HREF'=>makeUrlNS('Special', 'ChangeStyle/'.$paths->page),

   639         'FLAGS'=>'onclick="ajaxChangeStyle(); return false;"',

   640         'TEXT'=>'Change theme',

   641       ));

   642     

   643     $theme_link = $parser->run();

   644     

   645     $SID = ($session->sid_super) ? $session->sid_super : '';

   646     

   647     // Generate the dynamic javascript vars

   648     $js_dynamic = '    <script type="text/javascript">// <![CDATA[

   649       // This section defines some basic and very important variables that are used later in the static Javascript library.

   650       // SKIN DEVELOPERS: The template variable for this code block is {JS_DYNAMIC_VARS}. This MUST be inserted BEFORE the tag that links to the main Javascript lib.

   651       var title=\''. str_replace('\'', '\\\'', str_replace('\\', '\\\\', $paths->fullpage)) .'\';

   652       var page_exists='. ( ( $paths->page_exists) ? 'true' : 'false' ) .';

   653       var scriptPath=\''. scriptPath .'\';

   654       var contentPath=\''.contentPath.'\';

   655       var ENANO_SID =\'' . $SID . '\';

   656       var auth_level=' . $session->auth_level . ';

   657       var USER_LEVEL_GUEST = ' . USER_LEVEL_GUEST . ';

   658       var USER_LEVEL_MEMBER = ' . USER_LEVEL_MEMBER . ';

   659       var USER_LEVEL_CHPREF = ' . USER_LEVEL_CHPREF . ';

   660       var USER_LEVEL_MOD = ' . USER_LEVEL_MOD . ';

   661       var USER_LEVEL_ADMIN = ' . USER_LEVEL_ADMIN . ';

   662       var editNotice = \'' . ( (getConfig('wiki_edit_notice')=='1') ? str_replace("\n", "\\\n", RenderMan::render(getConfig('wiki_edit_notice_text'))) : '' ) . '\';

   663       var prot = ' . ( ($paths->page_protected && !$session->get_permissions('even_when_protected')) ? 'true' : 'false' ) .'; // No, hacking this var won\'t work, it\'s re-checked on the server

   664       var ENANO_SPECIAL_CREATEPAGE = \''. makeUrl($paths->nslist['Special'].'CreatePage') .'\';

   665       var ENANO_CREATEPAGE_PARAMS = \'_do=&pagename='. addslashes($paths->cpage['name']) .'&namespace=' . $paths->namespace . '\';

   666       var ENANO_SPECIAL_CHANGESTYLE = \''. makeUrlNS('Special', 'ChangeStyle') .'\';

   667       var namespace_list = new Array();

   668       var AES_BITS = '.AES_BITS.';

   669       var AES_BLOCKSIZE = '.AES_BLOCKSIZE.';

   670       var pagepass = \''. ( ( isset($_REQUEST['pagepass']) ) ? sha1($_REQUEST['pagepass']) : '' ) .'\';

   671       var ENANO_THEME_LIST = \'';

   672           foreach($this->theme_list as $t) {

   673             if($t['enabled'])

   674             {

   675               $js_dynamic .= '<option value="'.$t['theme_id'].'"';

   676               if($t['theme_id'] == $session->theme) $js_dynamic .= ' selected="selected"';

   677               $js_dynamic .= '>'.$t['theme_name'].'</option>';

   678             }

   679           }

   680       $js_dynamic .= '\';

   681       var ENANO_CURRENT_THEME = \''. $session->theme .'\';';

   682       foreach($paths->nslist as $k => $c)

   683       {

   684         $js_dynamic .= "namespace_list['{$k}'] = '$c';";

   685       }

   686       $js_dynamic .= "\n    //]]>\n    </script>";

   687     

   688     $tpl_strings = Array(

   689       'PAGE_NAME'=>$paths->cpage['name'],

   690       'PAGE_URLNAME'=>$paths->cpage['urlname'],

   691       'SITE_NAME'=>getConfig('site_name'),

   692       'USERNAME'=>$session->username,

   693       'SITE_DESC'=>getConfig('site_desc'),

   694       'TOOLBAR'=>$tb,

   695       'SCRIPTPATH'=>scriptPath,

   696       'CONTENTPATH'=>contentPath,

   697       'ADMIN_SID_QUES'=>$asq,

   698       'ADMIN_SID_AMP'=>$asa,

   699       'ADMIN_SID_AMP_HTML'=>$ash,

   700       'ADMIN_SID_AUTO'=>$as2,

   701       'ADDITIONAL_HEADERS'=>$this->additional_headers,

   702       'COPYRIGHT'=>getConfig('copyright_notice'),

   703       'TOOLBAR_EXTRAS'=>$this->toolbar_menu,

   704       'REQUEST_URI'=>$_SERVER['HTTP_HOST'].$_SERVER['REQUEST_URI'],

   705       'STYLE_LINK'=>makeUrlNS('Special', 'CSS'.$p, null, true), //contentPath.$paths->nslist['Special'].'CSS' . $p,

   706       'LOGIN_LINK'=>$login_link,

   707       'LOGOUT_LINK'=>$logout_link,

   708       'THEME_LINK'=>$theme_link,

   709       'TEMPLATE_DIR'=>scriptPath.'/themes/'.$this->theme,

   710       'THEME_ID'=>$this->theme,

   711       'STYLE_ID'=>$this->style,

   712       'JS_DYNAMIC_VARS'=>$js_dynamic,

   713       'UNREAD_PMS'=>$session->unread_pms

   714       );

   715     

   716     foreach ( $paths->nslist as $ns_id => $ns_prefix )

   717     {

   718       $tpl_strings[ 'NS_' . strtoupper($ns_id) ] = $ns_prefix;

   719     }

   720     

   721     $this->tpl_strings = array_merge($tpl_strings, $this->tpl_strings);

   722     list($this->tpl_strings['SIDEBAR_LEFT'], $this->tpl_strings['SIDEBAR_RIGHT'], $min) = $this->fetch_sidebar();

   723     $this->tpl_bool['sidebar_left']  = ( $this->tpl_strings['SIDEBAR_LEFT']  != $min) ? true : false;

   724     $this->tpl_bool['sidebar_right'] = ( $this->tpl_strings['SIDEBAR_RIGHT'] != $min) ? true : false;

   725     $this->tpl_bool['right_sidebar'] = $this->tpl_bool['sidebar_right']; // backward compatibility

   726   }

   727   

   728   function header($simple = false) 

   729   {

   730     global $db, $session, $paths, $template, $plugins; // Common objects

   731     ob_start();

   732     

   733     if(!$this->theme_loaded)

   734     {

   735       $this->load_theme($session->theme, $session->style);

   736     }

   737     

   738     $headers_sent = true;

   739     dc_here('template: generating and sending the page header');

   740     if(!defined('ENANO_HEADERS_SENT'))

   741       define('ENANO_HEADERS_SENT', '');

   742     if(!$this->no_headers) echo ( $simple ) ? $this->process_template('simple-header.tpl') : $this->process_template('header.tpl');

   743     if ( !$simple && $session->user_logged_in && $session->unread_pms > 0 )

   744     {

   745       echo $this->notify_unread_pms();

   746     }

   747     if ( !$simple && $session->sw_timed_out )

   748     {

   749       $login_link = makeUrlNS('Special', 'Login/' . $paths->fullpage, 'level=' . $session->user_level, true);

   750       echo '<div class="usermessage">';

   751       echo '<b>Your administrative session has timed out.</b> <a href="' . $login_link . '">Log in again</a>';

   752       echo '</div>';

   753     }

   754   }

   755   function footer($simple = false)

   756   {

   757     global $db, $session, $paths, $template, $plugins; // Common objects

   758     dc_here('template: generating and sending the page footer');

   759     if(!$this->no_headers) {

   760       

   761       if(!defined('ENANO_HEADERS_SENT'))

   762         $this->header();

   763       

   764       global $_starttime;

   765       if(isset($_GET['sqldbg']) && $session->get_permissions('mod_misc'))

   766       {

   767         echo '<h3>Query list as requested on URI</h3><pre style="margin-left: 1em">';

   768         echo $db->sql_backtrace();

   769         echo '</pre>';

   770       }

   771       

   772       $f = microtime_float();

   773       $f = $f - $_starttime;

   774       $f = round($f, 4);

   775       $dbg = 'Time: '.$f.'s  |  Queries: '.$db->num_queries;

   776       $t = ( $simple ) ? $this->process_template('simple-footer.tpl') : $this->process_template('footer.tpl');

   777       $t = str_replace('[[Stats]]', $dbg, $t);

   778       $t = str_replace('[[NumQueries]]', (string)$db->num_queries, $t);

   779       $t = str_replace('[[GenTime]]', (string)$f, $t);

   780       echo $t;

   781       

   782       ob_end_flush();

   783     }

   784     else return '';

   785   }

   786   function getHeader()

   787   {

   788     $headers_sent = true;

   789     dc_here('template: generating and sending the page header');

   790     if(!defined('ENANO_HEADERS_SENT'))

   791       define('ENANO_HEADERS_SENT', '');

   792     if(!$this->no_headers) return $this->process_template('header.tpl');

   793   }

   794   function getFooter()

   795   {

   796     global $db, $session, $paths, $template, $plugins; // Common objects

   797     dc_here('template: generating and sending the page footer');

   798     if(!$this->no_headers) {

   799       global $_starttime;

   800       $t = '';

   801       

   802       if(isset($_GET['sqldbg']) && $session->get_permissions('mod_misc'))

   803       {

   804         $t .= '<h3>Query list as requested on URI</h3><pre style="margin-left: 1em">';

   805         $t .= $db->sql_backtrace();

   806         $t .= '</pre>';

   807       }

   808       

   809       $f = microtime_float();

   810       $f = $f - $_starttime;

   811       $f = round($f, 4);

   812       $dbg = 'Time: '.$f.'s  |  Queries: '.$db->num_queries;

   813       $t.= $this->process_template('footer.tpl');

   814       $t = str_replace('[[Stats]]', $dbg, $t);

   815       $t = str_replace('[[NumQueries]]', (string)$db->num_queries, $t);

   816       $t = str_replace('[[GenTime]]', (string)$f, $t);

   817       return $t;

   818     }

   819     else return '';

   820   }

   821   

   822   function process_template($file) {

   823     global $db, $session, $paths, $template, $plugins; // Common objects

   824     if(!defined('ENANO_TEMPLATE_LOADED'))

   825     {

   826       $this->load_theme();

   827       $this->init_vars();

   828     }

   829     eval($this->compile_template($file));

   830     return $tpl_code;

   831   }

   832   

   833   function extract_vars($file) {

   834     global $db, $session, $paths, $template, $plugins; // Common objects

   835     if(!$this->theme)

   836     {

   837       die('$template->extract_vars(): theme not yet loaded, so we can\'t open template files yet...this is a bug and should be reported.<br /><br />Backtrace, most recent call first:<pre>'.enano_debug_print_backtrace(true).'</pre>');

   838     }

   839     if(!is_file(ENANO_ROOT . '/themes/'.$this->theme.'/'.$file)) die('Cannot find '.$file.' file for style "'.$this->theme.'", exiting');

   840     $text = file_get_contents(ENANO_ROOT . '/themes/'.$this->theme.'/'.$file);

   841     preg_match_all('#<\!-- VAR ([A-z0-9_-]*) -->(.*?)<\!-- ENDVAR \\1 -->#is', $text, $matches);

   842     $tplvars = Array();

   843     for($i=0;$i<sizeof($matches[1]);$i++)

   844     {

   845       $tplvars[$matches[1][$i]] = $matches[2][$i];

   846     }

   847     return $tplvars;

   848   }

   849   function compile_template($text) {

   850     global $db, $session, $paths, $template, $plugins; // Common objects

   851     if(!is_file(ENANO_ROOT . '/themes/'.$this->theme.'/'.$text)) die('Cannot find '.$text.' file for style, exiting');

   852     $n = $text;

   853     $tpl_filename = ENANO_ROOT . '/cache/' . $this->theme . '-' . str_replace('/', '-', $n) . '.php';

   854     if(!is_file(ENANO_ROOT . '/themes/'.$this->theme.'/'.$text)) die('Cannot find '.$text.' file for style, exiting');

   855     if(file_exists($tpl_filename) && getConfig('cache_thumbs')=='1')

   856     {

   857       include($tpl_filename);

   858       $text = file_get_contents(ENANO_ROOT . '/themes/'.$this->theme.'/'.$text);

   859       if(isset($md5) && $md5 == md5($text)) {

   860         return str_replace('\\"', '"', $tpl_text);

   861       }

   862     }

   863     $text = file_get_contents(ENANO_ROOT . '/themes/'.$this->theme.'/'.$n);

   864     

   865     $md5 = md5($text);

   866     

   867     $seed = md5 ( microtime() . mt_rand() );

   868     preg_match_all("/<\?php(.*?)\?>/is", $text, $m);

   869     //die('<pre>'.htmlspecialchars(print_r($m, true)).'</pre>');

   870     for($i = 0; $i < sizeof($m[1]); $i++)

   871     {

   872       $text = str_replace("<?php{$m[1][$i]}?>", "{PHPCODE:{$i}:{$seed}}", $text);

   873     }

   874     //die('<pre>'.htmlspecialchars($text).'</pre>');

   875     $text = 'ob_start(); echo \''.str_replace('\'', '\\\'', $text).'\'; $tpl_code = ob_get_contents(); ob_end_clean();';

   876     $text = preg_replace('#<!-- BEGIN (.*?) -->#is', '\'; if(isset($this->tpl_bool[\'\\1\']) && $this->tpl_bool[\'\\1\']) { echo \'', $text);

   877     $text = preg_replace('#<!-- IFSET (.*?) -->#is', '\'; if(isset($this->tpl_strings[\'\\1\'])) { echo \'', $text);

   878     $text = preg_replace('#<!-- IFPLUGIN (.*?) -->#is', '\'; if(getConfig(\'plugin_\\1\')==\'1\') { echo \'', $text);

   879     $text = preg_replace('#<!-- SYSMSG (.*?) -->#is', '\'; echo $template->tplWikiFormat($paths->sysMsg(\'\\1\')); echo \'', $text);

   880     $text = preg_replace('#<!-- BEGINNOT (.*?) -->#is', '\'; if(!$this->tpl_bool[\'\\1\']) { echo \'', $text);

   881     $text = preg_replace('#<!-- BEGINELSE (.*?) -->#is', '\'; } else { echo \'', $text);

   882     $text = preg_replace('#<!-- END (.*?) -->#is', '\'; } echo \'', $text);

   883     $text = preg_replace('#\{([A-z0-9]*)\}#is', '\'.$this->tpl_strings[\'\\1\'].\'', $text);

   884     for($i = 0; $i < sizeof($m[1]); $i++)

   885     {

   886       $text = str_replace("{PHPCODE:{$i}:{$seed}}", "'; {$m[1][$i]} echo '", $text);

   887     }

   888     if(is_writable(ENANO_ROOT.'/cache/') && getConfig('cache_thumbs')=='1')

   889     {

   890       //die($tpl_filename);

   891       $h = fopen($tpl_filename, 'w');

   892       if(!$h) return $text;

   893       $t = addslashes($text);

   894       fwrite($h, '<?php $md5 = \''.$md5.'\'; $tpl_text = \''.$t.'\'; ?>');

   895       fclose($h);

   896     }

   897     return $text; //('<pre>'.htmlspecialchars($text).'</pre>');

   898   }

   899   

   900   function compile_template_text($text) {

   901     $seed = md5 ( microtime() . mt_rand() );

   902     preg_match_all("/<\?php(.*?)\?>/is", $text, $m);

   903     //die('<pre>'.htmlspecialchars(print_r($m, true)).'</pre>');

   904     for($i = 0; $i < sizeof($m[1]); $i++)

   905     {

   906       $text = str_replace("<?php{$m[1][$i]}?>", "{PHPCODE:{$i}:{$seed}}", $text);

   907     }

   908     //die('<pre>'.htmlspecialchars($text).'</pre>');

   909     $text = 'ob_start(); echo \''.str_replace('\'', '\\\'', $text).'\'; $tpl_code = ob_get_contents(); ob_end_clean(); return $tpl_code;';

   910     $text = preg_replace('#<!-- BEGIN (.*?) -->#is', '\'; if(isset($this->tpl_bool[\'\\1\']) && $this->tpl_bool[\'\\1\']) { echo \'', $text);

   911     $text = preg_replace('#<!-- IFSET (.*?) -->#is', '\'; if(isset($this->tpl_strings[\'\\1\'])) { echo \'', $text);

   912     $text = preg_replace('#<!-- IFPLUGIN (.*?) -->#is', '\'; if(getConfig(\'plugin_\\1\')==\'1\') { echo \'', $text);

   913     $text = preg_replace('#<!-- SYSMSG (.*?) -->#is', '\'; echo $template->tplWikiFormat($paths->sysMsg(\'\\1\')); echo \'', $text);

   914     $text = preg_replace('#<!-- BEGINNOT (.*?) -->#is', '\'; if(!$this->tpl_bool[\'\\1\']) { echo \'', $text);

   915     $text = preg_replace('#<!-- BEGINELSE (.*?) -->#is', '\'; } else { echo \'', $text);

   916     $text = preg_replace('#<!-- END (.*?) -->#is', '\'; } echo \'', $text);

   917     $text = preg_replace('#\{([A-z0-9]*)\}#is', '\'.$this->tpl_strings[\'\\1\'].\'', $text);

   918     for($i = 0; $i < sizeof($m[1]); $i++)

   919     {

   920       $text = str_replace("{PHPCODE:{$i}:{$seed}}", "'; {$m[1][$i]} echo '", $text);

   921     }

   922     return $text; //('<pre>'.htmlspecialchars($text).'</pre>');

   923   }

   924   

   925   function parse($text)

   926   {

   927     $text = $this->compile_template_text($text);

   928     return eval($text);

   929   }

   930   

   931   // Steps to turn this:

   932   //   [[Project:Community Portal]]

   933   // into this:

   934   //   <a href="/Project:Community_Portal">Community Portal</a>

   935   // Must be done WITHOUT creating eval'ed code!!!

   936   

   937   // 1. preg_replace \[\[([a-zA-Z0-9 -_:]*?)\]\] with <a href="'.contentPath.'\\1">\\1</a>

   938   // 2. preg_match_all <a href="'.preg_quote(contentPath).'([a-zA-Z0-9 -_:]*?)">

   939   // 3. For each match, replace matches with identifiers

   940   // 4. For each match, str_replace ' ' with '_'

   941   // 5. For each match, str_replace match_id:random_val with $matches[$match_id]

   942   

   943   // The template language is really a miniature programming language; with variables, conditionals, everything!

   944   // So you can implement custom logic into your sidebar if you wish.

   945   // "Real" PHP support coming soon :-D

   946   

   947   function tplWikiFormat($message, $filter_links = false, $filename = 'elements.tpl') {

   948     global $db, $session, $paths, $template, $plugins; // Common objects

   949     $filter_links = false;

   950     $tplvars = $this->extract_vars($filename);

   951     if($session->sid_super) $as = htmlspecialchars(urlSeparator).'auth='.$session->sid_super;

   952     else $as = '';

   953     error_reporting(E_ALL);

   954     $random_id = sha1(microtime().''); // A temp value

   955     

   956     /*

   957      * PREPROCESSOR

   958      */

   959     

   960     // Variables

   961     

   962     preg_match_all('#\$([A-Z_-]+)\$#', $message, $links);

   963     $links = $links[1];

   964     

   965     for($i=0;$i<sizeof($links);$i++)

   966     {

   967       $message = str_replace('$'.$links[$i].'$', $this->tpl_strings[$links[$i]], $message);

   968     }

   969     

   970     // Conditionals

   971     

   972     preg_match_all('#\{if ([A-Za-z0-9_ &\|\!-]*)\}(.*?)\{\/if\}#is', $message, $links);

   973     

   974     for($i=0;$i<sizeof($links[1]);$i++)

   975     {

   976       $message = str_replace('{if '.$links[1][$i].'}'.$links[2][$i].'{/if}', '{CONDITIONAL:'.$i.':'.$random_id.'}', $message);

   977       

   978       // Time for some manual parsing...

   979       $chk = false;

   980       $current_id = '';

   981       $prn_level = 0;

   982       // Used to keep track of where we are in the conditional

   983       // Object of the game: turn {if this && ( that OR !something_else )} ... {/if} into if( ( isset($this->tpl_bool['that']) && $this->tpl_bool['that'] ) && ...

   984       // Method of attack: escape all variables, ignore all else. Non-valid code is filtered out by a regex above.

   985       $in_var_now = true;

   986       $in_var_last = false;

   987       $current_var = '';

   988       $current_var_start_pos = 0;

   989       $current_var_end_pos   = 0;

   990       $j = -1;

   991       $links[1][$i] = $links[1][$i] . ' ';

   992       $d = strlen($links[1][$i]);

   993       while($j < $d)

   994       {

   995         $j++;

   996         $in_var_last = $in_var_now;

   997         

   998         $char = substr($links[1][$i], $j, 1);

   999         $in_var_now = ( preg_match('#^([A-z0-9_]*){1}$#', $char) ) ? true : false;

  1000         if(!$in_var_last && $in_var_now)

  1001         {

  1002           $current_var_start_pos = $j;

  1003         }

  1004         if($in_var_last && !$in_var_now)

  1005         {

  1006           $current_var_end_pos = $j;

  1007         }

  1008         if($in_var_now)

  1009         {

  1010           $current_var .= $char;

  1011           continue;

  1012         }

  1013         // OK we are not inside of a variable. That means that we JUST hit the end because the counter ($j) will be advanced to the beginning of the next variable once processing here is complete.

  1014         if($char != ' ' && $char != '(' && $char != ')' && $char != 'A' && $char != 'N' && $char != 'D' && $char != 'O' && $char != 'R' && $char != '&' && $char != '|' && $char != '!' && $char != '<' && $char != '>' && $char != '0' && $char != '1' && $char != '2' && $char != '3' && $char != '4' && $char != '5' && $char != '6' && $char != '7' && $char != '8' && $char != '9')

  1015         {

  1016           // XSS attack! Bail out

  1017           echo '<p><b>Error:</b> Syntax error (possibly XSS attack) caught in template code:</p>';

  1018           echo '<pre>';

  1019           echo '{if '.$links[1][$i].'}';

  1020           echo "\n    ";

  1021           for($k=0;$k<$j;$k++) echo " ";

  1022           echo '<span style="color: red;">^</span>';

  1023           echo '</pre>';

  1024           continue 2;

  1025         }

  1026         if($current_var != '')

  1027         {

  1028           $cd = '( isset($this->tpl_bool[\''.$current_var.'\']) && $this->tpl_bool[\''.$current_var.'\'] )';

  1029           $cvt = substr($links[1][$i], 0, $current_var_start_pos) . $cd . substr($links[1][$i], $current_var_end_pos, strlen($links[1][$i]));

  1030           $j = $j + strlen($cd) - strlen($current_var);

  1031           $current_var = '';

  1032           $links[1][$i] = $cvt;

  1033           $d = strlen($links[1][$i]);

  1034         }

  1035       }

  1036       $links[1][$i] = substr($links[1][$i], 0, strlen($links[1][$i])-1);

  1037       $links[1][$i] = '$chk = ( '.$links[1][$i].' ) ? true : false;';

  1038       eval($links[1][$i]);

  1039       

  1040       if($chk) { // isset($this->tpl_bool[$links[1][$i]]) && $this->tpl_bool[$links[1][$i]]

  1041         if(strstr($links[2][$i], '{else}')) $c = substr($links[2][$i], 0, strpos($links[2][$i], '{else}'));

  1042         else $c = $links[2][$i];

  1043         $message = str_replace('{CONDITIONAL:'.$i.':'.$random_id.'}', $c, $message);

  1044       } else {

  1045         if(strstr($links[2][$i], '{else}')) $c = substr($links[2][$i], strpos($links[2][$i], '{else}')+6, strlen($links[2][$i]));

  1046         else $c = '';

  1047         $message = str_replace('{CONDITIONAL:'.$i.':'.$random_id.'}', $c, $message);

  1048       }

  1049     }

  1050     

  1051     preg_match_all('#\{!if ([A-Za-z_-]*)\}(.*?)\{\/if\}#is', $message, $links);

  1052     

  1053     for($i=0;$i<sizeof($links[1]);$i++)

  1054     {

  1055       $message = str_replace('{!if '.$links[1][$i].'}'.$links[2][$i].'{/if}', '{CONDITIONAL:'.$i.':'.$random_id.'}', $message);

  1056       if(isset($this->tpl_bool[$links[1][$i]]) && $this->tpl_bool[$links[1][$i]]) {

  1057         if(strstr($links[2][$i], '{else}')) $c = substr($links[2][$i], strpos($links[2][$i], '{else}')+6, strlen($links[2][$i]));

  1058         else $c = '';

  1059         $message = str_replace('{CONDITIONAL:'.$i.':'.$random_id.'}', $c, $message);

  1060       } else {

  1061         if(strstr($links[2][$i], '{else}')) $c = substr($links[2][$i], 0, strpos($links[2][$i], '{else}'));

  1062         else $c = $links[2][$i];

  1063         $message = str_replace('{CONDITIONAL:'.$i.':'.$random_id.'}', $c, $message);

  1064       }

  1065     }

  1066     

  1067     /*

  1068      * HTML RENDERER

  1069      */

  1070      

  1071     // Images

  1072     $j = preg_match_all('#\[\[:'.$paths->nslist['File'].'([\w\s0-9_\(\)!@%\^\+\|\.-]+?)\]\]#is', $message, $matchlist);

  1073     $matches = Array();

  1074     $matches['images'] = $matchlist[1];

  1075     for($i=0;$i<sizeof($matchlist[1]);$i++)

  1076     {

  1077       if(isPage($paths->nslist['File'].$matches['images'][$i]))

  1078       {

  1079         $message = str_replace('[[:'.$paths->nslist['File'].$matches['images'][$i].']]',

  1080                                '<img alt="'.$matches['images'][$i].'" style="border: 0" src="'.makeUrlNS('Special', 'DownloadFile/'.$matches['images'][$i]).'" />',

  1081                                $message);

  1082       }

  1083     }

  1084     

  1085     // Internal links

  1086     

  1087     $text_parser = $this->makeParserText($tplvars['sidebar_button']);

  1088     

  1089     preg_match_all('#\[\[([a-zA-Z0-9 -_]*?)\]\]#is', $message, $il);

  1090     for($i=0;$i<sizeof($il[1]);$i++)

  1091     {

  1092       $href = makeUrl(str_replace(' ', '_', $il[1][$i]), null, true);

  1093       $text_parser->assign_vars(Array(

  1094           'HREF'  => $href,

  1095           'FLAGS' => '',

  1096           'TEXT'  => $il[1][$i]

  1097         ));

  1098       $message = str_replace("[[{$il[1][$i]}]]", $text_parser->run(), $message);

  1099     }

  1100     

  1101     preg_match_all('#\[\[([a-zA-Z0-9 -_]*?)\|([a-zA-Z0-9!@\#\$%\^&\*\(\)\{\} -_]*?)\]\]#is', $message, $il);

  1102     for($i=0;$i<sizeof($il[1]);$i++)

  1103     {

  1104       $href = makeUrl(str_replace(' ', '_', $il[1][$i]), null, true);

  1105       $text_parser->assign_vars(Array(

  1106           'HREF'  => $href,

  1107           'FLAGS' => '',

  1108           'TEXT'  => $il[2][$i]

  1109         ));

  1110       $message = str_replace("[[{$il[1][$i]}|{$il[2][$i]}]]", $text_parser->run(), $message);

  1111     }

  1112     

  1113     // External links

  1114     $message = preg_replace('#\[(http|ftp|irc):\/\/([a-z0-9\/:_\.\?&%\#@_\\\\-]+?)\\ ([^\]]+)]#', '<a href="\\1://\\2">\\3</a><br style="display: none;" />', $message);

  1115     $message = preg_replace('#\[(http|ftp|irc):\/\/([a-z0-9\/:_\.\?&%\#@_\\\\-]+?)\\]#', '<a href="\\1://\\2">\\1://\\2</a><br style="display: none;" />', $message);

  1116     

  1117     $parser1 = $this->makeParserText($tplvars['sidebar_section']);

  1118     $parser2 = $this->makeParserText($tplvars['sidebar_section_raw']);

  1119                             

  1120     preg_match_all('#\{slider(2|)=(.*?)\}(.*?)\{\/slider(2|)\}#is',  $message, $sb);

  1121     

  1122     // Modified to support the sweet new template var system

  1123     for($i=0;$i<sizeof($sb[1]);$i++)

  1124     {

  1125       $p = ($sb[1][$i] == '2') ? $parser2 : $parser1;

  1126       $p->assign_vars(Array('TITLE'=>$sb[2][$i],'CONTENT'=>$sb[3][$i]));

  1127       $message = str_replace("{slider{$sb[1][$i]}={$sb[2][$i]}}{$sb[3][$i]}{/slider{$sb[4][$i]}}", $p->run(), $message);

  1128     }

  1129     

  1130     /*

  1131     Extras ;-)

  1132     $message = preg_replace('##is', '', $message);

  1133     $message = preg_replace('##is', '', $message);

  1134     $message = preg_replace('##is', '', $message);

  1135     $message = preg_replace('##is', '', $message);