--- a/ajax.php Sun Mar 28 21:49:26 2010 -0400
+++ b/ajax.php Sun Mar 28 23:10:46 2010 -0400
@@ -11,775 +11,775 @@
* warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for details.
*/
- define('ENANO_INTERFACE_AJAX', '');
-
- require('includes/common.php');
-
- global $db, $session, $paths, $template, $plugins; // Common objects
- if(!isset($_GET['_mode'])) die('This script cannot be accessed directly.');
-
- $_ob = '';
-
- switch($_GET['_mode']) {
- case "checkusername":
- require_once(ENANO_ROOT.'/includes/pageutils.php');
- echo PageUtils::checkusername($_GET['name']);
- break;
- case "getsource":
- header('Content-type: text/plain');
- $password = ( isset($_GET['pagepass']) ) ? $_GET['pagepass'] : false;
- $revid = ( isset($_GET['revid']) ) ? intval($_GET['revid']) : 0;
- $page = new PageProcessor($paths->page_id, $paths->namespace, $revid);
- $page->password = $password;
-
- $have_draft = false;
- // Kinda hacky fix for issue 7: draft restore not offered for nonexistent pages
- if ( ($src = $page->fetch_source()) || !$page->exists() )
- {
- $allowed = true;
- $q = $db->sql_query('SELECT author, time_id, page_text, edit_summary, page_format FROM ' . table_prefix . 'logs WHERE log_type = \'page\' AND action = \'edit\'
- AND page_id = \'' . $db->escape($paths->page_id) . '\'
- AND namespace = \'' . $db->escape($paths->namespace) . '\'
- AND is_draft = 1;');
- if ( !$q )
- $db->die_json();
-
- if ( $db->numrows() > 0 )
- {
- $have_draft = true;
- $draft_row = $db->fetchrow($q);
- }
- }
- else if ( $src !== false )
- {
- $allowed = true;
- $src = '';
- }
- else
- {
- $allowed = false;
- $src = '';
- }
-
- $auth_edit = ( $session->get_permissions('edit_page') && ( $session->get_permissions('even_when_protected') || !$page->ns->page_protected ) );
- $auth_wysiwyg = ( $session->get_permissions('edit_wysiwyg') );
-
- $return = array(
- 'mode' => 'editor',
- 'src' => $src,
- 'auth_view_source' => $allowed,
- 'auth_edit' => $auth_edit,
- 'time' => time(),
- 'require_captcha' => false,
- 'allow_wysiwyg' => $auth_wysiwyg,
- 'revid' => $revid,
- 'have_draft' => false
- );
-
- $return['page_format'] = $page->ns->cdata['page_format'];
- if ( $return['page_format'] == 'xhtml' )
- {
- // gently process headings to make tinymce format them correctly
- if ( preg_match_all('/^ *?(={1,6}) *(.+?) *\\1 *$/m', $return['src'], $matches) )
- {
- foreach ( $matches[0] as $i => $match )
- {
- $hi = strlen($matches[1][$i]);
- $heading = "<h{$hi}>{$matches[2][$i]}</h{$hi}>";
- $return['src'] = str_replace_once($match, $heading, $return['src']);
- }
- }
- }
-
- if ( $have_draft )
- {
- $row =& $draft_row;
- $return['have_draft'] = true;
- $return['draft_author'] = $row['author'];
- $return['draft_time'] = enano_date(ED_DATE | ED_TIME, intval($row['time_id']));
- if ( isset($_GET['get_draft']) && @$_GET['get_draft'] === '1' )
- {
- $return['src'] = $row['page_text'];
- $return['edit_summary'] = $row['edit_summary'];
- $return['page_format'] = $row['page_format'];
- }
- }
-
- $return['undo_info'] = array();
-
- if ( $revid > 0 )
- {
- // Retrieve information about this revision and the current one
- $q = $db->sql_query('SELECT l1.author AS currentrev_author, l2.author AS oldrev_author FROM ' . table_prefix . 'logs AS l1
- LEFT JOIN ' . table_prefix . 'logs AS l2
- ON ( l2.log_id = ' . $revid . '
- AND l2.log_type = \'page\'
- AND l2.action = \'edit\'
- AND l2.page_id = \'' . $db->escape($paths->page_id) . '\'
- AND l2.namespace = \'' . $db->escape($paths->namespace) . '\'
- AND l2.is_draft != 1
- )
- WHERE l1.log_type = \'page\'
- AND l1.action = \'edit\'
- AND l1.page_id = \'' . $db->escape($paths->page_id) . '\'
- AND l1.namespace = \'' . $db->escape($paths->namespace) . '\'
- AND l1.time_id > ' . $page->revision_time . '
- AND l1.is_draft != 1
- ORDER BY l1.time_id DESC;');
- if ( !$q )
- $db->die_json();
-
- if ( $db->numrows() > 0 )
- {
- $rev_count = $db->numrows() - 1;
- if ( $rev_count == -1 )
- {
- $return = array(
- 'mode' => 'error',
- 'error' => '[Internal] No rows returned by revision info query. SQL:<pre>' . $db->latest_query . '</pre>'
- );
- }
- else
- {
- $row = $db->fetchrow();
- $return['undo_info'] = array(
- 'old_author' => $row['oldrev_author'],
- 'current_author' => $row['currentrev_author'],
- 'undo_count' => $rev_count
- );
- }
- }
- else
- {
- $return['revid'] = $revid = 0;
- }
- }
-
- if ( $auth_edit && !$session->user_logged_in && getConfig('guest_edit_require_captcha') == '1' )
- {
- $return['require_captcha'] = true;
- $return['captcha_id'] = $session->make_captcha();
- }
-
- $template->load_theme();
- $return['toolbar_templates'] = $template->extract_vars('toolbar.tpl');
- $return['edit_notice'] = $template->get_wiki_edit_notice();
-
- echo enano_json_encode($return);
- break;
- case "getpage":
- // echo PageUtils::getpage($paths->page, false, ( (isset($_GET['oldid'])) ? $_GET['oldid'] : false ));
- $output = new Output_Striptease();
-
- $revision_id = ( (isset($_GET['oldid'])) ? intval($_GET['oldid']) : 0 );
- $page = new PageProcessor( $paths->page_id, $paths->namespace, $revision_id );
-
- $pagepass = ( isset($_REQUEST['pagepass']) ) ? $_REQUEST['pagepass'] : '';
- $page->password = $pagepass;
- $page->allow_redir = ( !isset($_GET['redirect']) || (isset($_GET['redirect']) && $_GET['redirect'] !== 'no') );
-
- $page->send();
- break;
- case "savepage":
- /* **** OBSOLETE **** */
-
- break;
- case "savepage_json":
- header('Content-type: application/json');
- if ( !isset($_POST['r']) )
- die('Invalid request');
-
- try
- {
- $request = enano_json_decode($_POST['r']);
- if ( !isset($request['src']) || !isset($request['summary']) || !isset($request['minor_edit']) || !isset($request['time']) || !isset($request['draft']) )
- die('Invalid request');
- }
- catch(Zend_Json_Exception $e)
- {
- die("JSON parsing failed. View as HTML to see full report.\n<br /><br />\n<pre>" . htmlspecialchars(strval($e)) . "</pre><br />Request: <pre>" . htmlspecialchars($_POST['r']) . "</pre>");
- }
-
- $time = intval($request['time']);
-
- if ( $request['draft'] )
- {
- //
- // The user wants to save a draft version of the page.
- //
-
- // Validate permissions
- if ( !$session->get_permissions('edit_page') )
- {
- $return = array(
- 'mode' => 'error',
- 'error' => 'access_denied'
- );
- }
- else
- {
- // Delete any draft copies if they exist
- $q = $db->sql_query('DELETE FROM ' . table_prefix . 'logs WHERE log_type = \'page\' AND action = \'edit\'
- AND page_id = \'' . $db->escape($paths->page_id) . '\'
- AND namespace = \'' . $db->escape($paths->namespace) . '\'
- AND is_draft = 1;');
- if ( !$q )
- $db->die_json();
-
- // are we just supposed to delete the draft?
- if ( $request['src'] === -1 )
- {
- $return = array(
- 'mode' => 'success',
- 'is_draft' => 'delete'
- );
- }
- else
- {
- $src = RenderMan::preprocess_text($request['src'], false, false);
- $draft_format = $request['format'];
- if ( !in_array($draft_format, array('xhtml', 'wikitext')) )
- {
- $return = array(
- 'mode' => 'error',
- 'error' => 'invalid_format'
- );
- }
- else
- {
- // Save the draft
- $q = $db->sql_query('INSERT INTO ' . table_prefix . 'logs ( log_type, action, page_id, namespace, author, author_uid, edit_summary, page_text, is_draft, time_id, page_format )
- VALUES (
- \'page\',
- \'edit\',
- \'' . $db->escape($paths->page_id) . '\',
- \'' . $db->escape($paths->namespace) . '\',
- \'' . $db->escape($session->username) . '\',
- ' . $session->user_id . ',
- \'' . $db->escape($request['summary']) . '\',
- \'' . $db->escape($src) . '\',
- 1,
- ' . time() . ',
- \'' . $draft_format . '\'
- );');
-
- // Done!
- $return = array(
- 'mode' => 'success',
- 'is_draft' => true
- );
- }
- }
- }
- }
- else
- {
- // Verify that no edits have been made since the editor was requested
- $q = $db->sql_query('SELECT time_id, author FROM ' . table_prefix . "logs WHERE log_type = 'page' AND action = 'edit' AND page_id = '{$paths->page_id}' AND namespace = '{$paths->namespace}' AND is_draft != 1 ORDER BY time_id DESC LIMIT 1;");
- if ( !$q )
- $db->die_json();
-
- $row = $db->fetchrow();
- $db->free_result();
-
- if ( $row['time_id'] > $time )
- {
- $return = array(
- 'mode' => 'obsolete',
- 'author' => $row['author'],
- 'date_string' => enano_date(ED_DATE | ED_TIME, $row['time_id']),
- 'time' => $row['time_id'] // time() ???
- );
- echo enano_json_encode($return);
- break;
- }
-
- // Verify captcha, if needed
- if ( false && !$session->user_logged_in && getConfig('guest_edit_require_captcha') == '1' )
- {
- if ( !isset($request['captcha_id']) || !isset($request['captcha_code']) )
- {
- die('Invalid request, need captcha metadata');
- }
- $code_correct = strtolower($session->get_captcha($request['captcha_id']));
- $code_input = strtolower($request['captcha_code']);
- if ( $code_correct !== $code_input )
- {
- $return = array(
- 'mode' => 'errors',
- 'errors' => array($lang->get('editor_err_captcha_wrong')),
- 'new_captcha' => $session->make_captcha()
- );
- echo enano_json_encode($return);
- break;
- }
- }
-
- // Verification complete. Start the PageProcessor and let it do the dirty work for us.
- $page = new PageProcessor($paths->page_id, $paths->namespace);
- if ( $page->update_page($request['src'], $request['summary'], ( $request['minor_edit'] == 1 ), $request['format']) )
- {
- $return = array(
- 'mode' => 'success',
- 'is_draft' => false
- );
- }
- else
- {
- $errors = array();
- while ( $err = $page->pop_error() )
- {
- $errors[] = $err;
- }
- $return = array(
- 'mode' => 'errors',
- 'errors' => array_values($errors)
- );
- if ( !$session->user_logged_in && getConfig('guest_edit_require_captcha') == '1' )
- {
- $return['new_captcha'] = $session->make_captcha();
- }
- }
- }
-
- // If this is based on a draft version, delete the draft - we no longer need it.
- if ( @$request['used_draft'] && !$request['draft'] )
- {
- $q = $db->sql_query('DELETE FROM ' . table_prefix . 'logs WHERE log_type = \'page\' AND action = \'edit\'
- AND page_id = \'' . $db->escape($paths->page_id) . '\'
- AND namespace = \'' . $db->escape($paths->namespace) . '\'
- AND is_draft = 1;');
- }
-
- echo enano_json_encode($return);
-
- break;
- case "diff_cur":
-
- // Lie about our content type to fool ad scripts
- header('Content-type: application/xhtml+xml');
-
- if ( !isset($_POST['text']) )
- die('Invalid request');
-
- $page = new PageProcessor($paths->page_id, $paths->namespace);
- if ( !($src = $page->fetch_source()) )
- {
- die('Access denied');
- }
-
- $diff = RenderMan::diff($src, $_POST['text']);
- if ( $diff == '<table class="diff"></table>' )
- {
- $diff = '<p>' . $lang->get('editor_msg_diff_empty') . '</p>';
- }
-
- echo '<div class="info-box">' . $lang->get('editor_msg_diff') . '</div>';
- echo $diff;
-
- break;
- case "protect":
- // echo PageUtils::protect($paths->page_id, $paths->namespace, (int)$_POST['level'], $_POST['reason']);
-
- if ( @$_POST['reason'] === '__ROLLBACK__' )
- {
- // __ROLLBACK__ is a keyword for log entries.
- die('"__ROLLBACK__" ain\'t gonna do it, buddy. Try to _not_ use reserved keywords next time, ok?');
- }
-
- $page = new PageProcessor($paths->page_id, $paths->namespace);
- header('Content-type: application/json');
-
- $result = $page->protect_page(intval($_POST['level']), $_POST['reason']);
- echo enano_json_encode($result);
- break;
- case "histlist":
- require_once(ENANO_ROOT.'/includes/pageutils.php');
- echo PageUtils::histlist($paths->page_id, $paths->namespace);
- break;
- case "rollback":
- $id = intval(@$_GET['id']);
- $page = new PageProcessor($paths->page_id, $paths->namespace);
- header('Content-type: application/json');
-
- $result = $page->rollback_log_entry($id);
- echo enano_json_encode($result);
- break;
- case "comments":
- require_once(ENANO_ROOT.'/includes/comment.php');
- $comments = new Comments($paths->page_id, $paths->namespace);
- if ( isset($_POST['data']) )
- {
- $comments->process_json($_POST['data']);
- }
- else
- {
- die('{ "mode" : "error", "error" : "No input" }');
- }
- break;
- case "rename":
- $page = new PageProcessor($paths->page_id, $paths->namespace);
- header('Content-type: application/json');
-
- $result = $page->rename_page($_POST['newtitle']);
- echo enano_json_encode($result);
- break;
- case "flushlogs":
- require_once(ENANO_ROOT.'/includes/pageutils.php');
- echo PageUtils::flushlogs($paths->page_id, $paths->namespace);
- break;
- case "deletepage":
- require_once(ENANO_ROOT.'/includes/pageutils.php');
- $reason = ( isset($_POST['reason']) ) ? $_POST['reason'] : false;
- if ( empty($reason) )
- die($lang->get('page_err_need_reason'));
- echo PageUtils::deletepage($paths->page_id, $paths->namespace, $reason);
- break;
- case "delvote":
- require_once(ENANO_ROOT.'/includes/pageutils.php');
- echo PageUtils::delvote($paths->page_id, $paths->namespace);
- break;
- case "resetdelvotes":
- require_once(ENANO_ROOT.'/includes/pageutils.php');
- echo PageUtils::resetdelvotes($paths->page_id, $paths->namespace);
- break;
- case "getstyles":
- require_once(ENANO_ROOT.'/includes/pageutils.php');
- echo PageUtils::getstyles($_GET['id']);
- break;
- case "catedit":
- require_once(ENANO_ROOT.'/includes/pageutils.php');
- echo PageUtils::catedit($paths->page_id, $paths->namespace);
- break;
- case "catsave":
- require_once(ENANO_ROOT.'/includes/pageutils.php');
- echo PageUtils::catsave($paths->page_id, $paths->namespace, $_POST);
- break;
- case "setwikimode":
- require_once(ENANO_ROOT.'/includes/pageutils.php');
- echo PageUtils::setwikimode($paths->page_id, $paths->namespace, (int)$_GET['mode']);
- break;
- case "setpass":
- require_once(ENANO_ROOT.'/includes/pageutils.php');
- echo PageUtils::setpass($paths->page_id, $paths->namespace, $_POST['password']);
- break;
- case "fillusername":
- break;
- case "fillpagename":
- break;
- case "preview":
- require_once(ENANO_ROOT.'/includes/pageutils.php');
- $template->init_vars();
- echo PageUtils::genPreview($_POST['text']);
- break;
- case "transform":
- header('Content-type: text/javascript');
- if ( !isset($_GET['to']) )
- {
- echo enano_json_encode(array(
- 'mode' => 'error',
- 'error' => '"to" not specified'
- ));
- break;
- }
- if ( !isset($_POST['text']) )
- {
- echo enano_json_encode(array(
- 'mode' => 'error',
- 'error' => '"text" not specified (must be on POST)'
- ));
- break;
- }
- switch($_GET['to'])
- {
- case 'xhtml':
- $result = RenderMan::render($_POST['text'], RENDER_BLOCK | RENDER_NOSMILIES, false);
- break;
- case 'wikitext':
- $result = RenderMan::reverse_render($_POST['text']);
- break;
- default:
- $text =& $_POST['text'];
- $result = false;
- $code = $plugins->setHook('ajax_transform');
- foreach ( $code as $cmd )
- {
- eval($cmd);
- }
- if ( !$result )
- {
- echo enano_json_encode(array(
- 'mode' => 'error',
- 'error' => 'Invalid target format'
- ));
- break;
- }
- break;
- }
-
- // mostly for debugging, but I suppose this could be useful elsewhere.
- if ( isset($_POST['plaintext']) )
- die($result);
-
- echo enano_json_encode(array(
- 'mode' => 'transformed_text',
- 'text' => $result
- ));
- break;
- case "pagediff":
- require_once(ENANO_ROOT.'/includes/pageutils.php');
- $id1 = ( isset($_GET['diff1']) ) ? (int)$_GET['diff1'] : false;
- $id2 = ( isset($_GET['diff2']) ) ? (int)$_GET['diff2'] : false;
- if(!$id1 || !$id2) { echo '<p>Invalid request.</p>'; $template->footer(); break; }
- if(!preg_match('#^([0-9]+)$#', (string)$_GET['diff1']) ||
- !preg_match('#^([0-9]+)$#', (string)$_GET['diff2'] )) { echo '<p>SQL injection attempt</p>'; $template->footer(); break; }
- echo PageUtils::pagediff($paths->page_id, $paths->namespace, $id1, $id2);
- break;
- case "jsres":
- die('// ERROR: this section is deprecated and has moved to includes/clientside/static/enano-lib-basic.js.');
- break;
- case "rdns":
- if(!$session->get_permissions('mod_misc')) die('Go somewhere else for your reverse DNS info!');
- $ip = $_GET['ip'];
- if ( !is_valid_ip($ip) )
- {
- echo $lang->get('acpsl_err_invalid_ip');
- }
- $rdns = gethostbyaddr($ip);
- if ( $rdns == $ip )
- echo $lang->get('acpsl_err_ptr_no_resolve');
- else echo $rdns;
- break;
- case 'acljson':
- require_once(ENANO_ROOT.'/includes/pageutils.php');
- $parms = ( isset($_POST['acl_params']) ) ? rawurldecode($_POST['acl_params']) : false;
- echo PageUtils::acl_json($parms);
- break;
- case 'theme_list':
- header('Content-type: application/json');
-
- $return = array();
- foreach ( $template->theme_list as $theme )
- {
- if ( $theme['enabled'] != 1 )
- continue;
-
- $return[] = array(
- 'theme_name' => $theme['theme_name'],
- 'theme_id' => $theme['theme_id'],
- 'have_thumb' => file_exists(ENANO_ROOT . "/themes/{$theme['theme_id']}/preview.png")
- );
- }
-
- echo enano_json_encode($return);
-
- break;
- case "get_styles":
- if ( !preg_match('/^[a-z0-9_-]+$/', $_GET['theme_id']) )
- die(enano_json_encode(array()));
-
- $theme_id = $_GET['theme_id'];
- $return = array();
-
- if ( $dr = @opendir(ENANO_ROOT . "/themes/$theme_id/css/") )
- {
- while ( $dh = @readdir($dr) )
- {
- if ( preg_match('/\.css$/', $dh) && $dh != '_printable.css' )
- {
- $return[] = preg_replace('/\.css$/', '', $dh);
- }
- }
- }
- else
- {
- $return = array(
- 'mode' => 'error',
- 'error' => 'Could not open directory.'
- );
- }
- echo enano_json_encode($return);
- break;
- case "change_theme":
- if ( !isset($_POST['theme_id']) || !isset($_POST['style_id']) )
- {
- die(enano_json_encode(array('mode' => 'error', 'error' => 'Invalid parameter')));
- }
- if ( !preg_match('/^([a-z0-9_-]+)$/i', $_POST['theme_id']) || !preg_match('/^([a-z0-9_-]+)$/i', $_POST['style_id']) )
- {
- die(enano_json_encode(array('mode' => 'error', 'error' => 'Invalid parameter')));
- }
- if ( !file_exists(ENANO_ROOT . '/themes/' . $_POST['theme_id'] . '/css/' . $_POST['style_id'] . '.css') )
- {
- die(enano_json_encode(array('mode' => 'error', 'error' => 'Can\'t find theme file: ' . ENANO_ROOT . '/themes/' . $_POST['theme_id'] . '/css/' . $_POST['style_id'] . '.css')));;
- }
- if ( !$session->user_logged_in )
- {
- die(enano_json_encode(array('mode' => 'error', 'error' => 'You must be logged in to change your theme')));
- }
- // Just in case something slipped through...
- $theme_id = $db->escape($_POST['theme_id']);
- $style_id = $db->escape($_POST['style_id']);
- $e = $db->sql_query('UPDATE ' . table_prefix . "users SET theme = '$theme_id', style = '$style_id' WHERE user_id = $session->user_id;");
- if ( !$e )
- die( $db->get_error() );
-
- echo enano_json_encode(array(
- 'success' => true
- ));
- break;
- case 'get_tags':
-
- $ret = array('tags' => array(), 'user_level' => $session->user_level, 'can_add' => $session->get_permissions('tag_create'));
- $q = $db->sql_query('SELECT t.tag_id, t.tag_name, pg.pg_target IS NOT NULL AS used_in_acl, t.user_id FROM '.table_prefix.'tags AS t
- LEFT JOIN '.table_prefix.'page_groups AS pg
- ON ( ( pg.pg_type = ' . PAGE_GRP_TAGGED . ' AND pg.pg_target=t.tag_name ) OR ( pg.pg_type IS NULL AND pg.pg_target IS NULL ) )
- WHERE t.page_id=\'' . $db->escape($paths->page_id) . '\' AND t.namespace=\'' . $db->escape($paths->namespace) . '\';');
- if ( !$q )
- $db->_die();
-
- while ( $row = $db->fetchrow() )
- {
- $can_del = true;
-
- $perm = ( $row['user_id'] != $session->user_id ) ?
- 'tag_delete_other' :
- 'tag_delete_own';
-
- if ( $row['user_id'] == 1 && !$session->user_logged_in )
- // anonymous user trying to delete tag (hardcode blacklisted)
- $can_del = false;
-
- if ( !$session->get_permissions($perm) )
- $can_del = false;
-
- if ( $row['used_in_acl'] == 1 && !$session->get_permissions('edit_acl') && $session->user_level < USER_LEVEL_ADMIN )
- $can_del = false;
-
- $ret['tags'][] = array(
- 'id' => $row['tag_id'],
- 'name' => $row['tag_name'],
- 'can_del' => $can_del,
- 'acl' => ( $row['used_in_acl'] == 1 )
- );
- }
-
- echo enano_json_encode($ret);
-
- break;
- case 'addtag':
- $resp = array(
- 'success' => false,
- 'error' => 'No error',
- 'can_del' => ( $session->get_permissions('tag_delete_own') && $session->user_logged_in ),
- 'in_acl' => false
- );
-
- // first of course, are we allowed to tag pages?
- if ( !$session->get_permissions('tag_create') )
- {
- $resp['error'] = 'You are not permitted to tag pages.';
- die(enano_json_encode($resp));
- }
-
- // sanitize the tag name
- $tag = sanitize_tag($_POST['tag']);
- $tag = $db->escape($tag);
-
- if ( strlen($tag) < 2 )
- {
- $resp['error'] = 'Tags must consist of at least 2 alphanumeric characters.';
- die(enano_json_encode($resp));
- }
-
- // check if tag is already on page
- $q = $db->sql_query('SELECT 1 FROM '.table_prefix.'tags WHERE page_id=\'' . $db->escape($paths->page_id) . '\' AND namespace=\'' . $db->escape($paths->namespace) . '\' AND tag_name=\'' . $tag . '\';');
- if ( !$q )
- $db->_die();
- if ( $db->numrows() > 0 )
- {
- $resp['error'] = 'This page already has this tag.';
- die(enano_json_encode($resp));
- }
- $db->free_result();
-
- // tricky: make sure this tag isn't being used in some page group, and thus adding it could affect page access
- $can_edit_acl = ( $session->get_permissions('edit_acl') || $session->user_level >= USER_LEVEL_ADMIN );
- $q = $db->sql_query('SELECT 1 FROM '.table_prefix.'page_groups WHERE pg_type=' . PAGE_GRP_TAGGED . ' AND pg_target=\'' . $tag . '\';');
- if ( !$q )
- $db->_die();
- if ( $db->numrows() > 0 && !$can_edit_acl )
- {
- $resp['error'] = 'This tag is used in an ACL page group, and thus can\'t be added to a page by people without administrator privileges.';
- die(enano_json_encode($resp));
- }
- $resp['in_acl'] = ( $db->numrows() > 0 );
- $db->free_result();
-
- // we're good
- $q = $db->sql_query('INSERT INTO '.table_prefix.'tags(tag_name,page_id,namespace,user_id) VALUES(\'' . $tag . '\', \'' . $db->escape($paths->page_id) . '\', \'' . $db->escape($paths->namespace) . '\', ' . $session->user_id . ');');
- if ( !$q )
- $db->_die();
-
- $resp['success'] = true;
- $resp['tag'] = $tag;
- $resp['tag_id'] = $db->insert_id();
-
- echo enano_json_encode($resp);
- break;
- case 'deltag':
-
- $tag_id = intval($_POST['tag_id']);
- if ( empty($tag_id) )
- die('Invalid tag ID');
-
- $q = $db->sql_query('SELECT t.tag_id, t.user_id, t.page_id, t.namespace, pg.pg_target IS NOT NULL AS used_in_acl FROM '.table_prefix.'tags AS t
- LEFT JOIN '.table_prefix.'page_groups AS pg
- ON ( pg.pg_id IS NULL OR ( pg.pg_target = t.tag_name AND pg.pg_type = ' . PAGE_GRP_TAGGED . ' ) )
- WHERE t.tag_id=' . $tag_id . ';');
-
- if ( !$q )
- $db->_die();
-
- if ( $db->numrows() < 1 )
- die('Could not find a tag with that ID');
-
- $row = $db->fetchrow();
- $db->free_result();
-
- if ( $row['page_id'] == $paths->page_id && $row['namespace'] == $paths->namespace )
- $perms =& $session;
- else
- $perms = $session->fetch_page_acl($row['page_id'], $row['namespace']);
-
- $perm = ( $row['user_id'] != $session->user_id ) ?
- 'tag_delete_other' :
- 'tag_delete_own';
-
- if ( $row['user_id'] == 1 && !$session->user_logged_in )
- // anonymous user trying to delete tag (hardcode blacklisted)
- die('You are not authorized to delete this tag.');
-
- if ( !$perms->get_permissions($perm) )
- die('You are not authorized to delete this tag.');
-
- if ( $row['used_in_acl'] == 1 && !$perms->get_permissions('edit_acl') && $session->user_level < USER_LEVEL_ADMIN )
- die('You are not authorized to delete this tag.');
-
- // We're good
- $q = $db->sql_query('DELETE FROM '.table_prefix.'tags WHERE tag_id = ' . $tag_id . ';');
- if ( !$q )
- $db->_die();
-
- echo 'success';
-
- break;
- case 'ping':
- echo 'pong';
- break;
- default:
- die('Hacking attempt');
- break;
- }
-
+define('ENANO_INTERFACE_AJAX', '');
+
+require('includes/common.php');
+
+global $db, $session, $paths, $template, $plugins; // Common objects
+if(!isset($_GET['_mode'])) die('This script cannot be accessed directly.');
+
+$_ob = '';
+
+switch($_GET['_mode']) {
+ case "checkusername":
+ require_once(ENANO_ROOT.'/includes/pageutils.php');
+ echo PageUtils::checkusername($_GET['name']);
+ break;
+ case "getsource":
+ header('Content-type: text/plain');
+ $password = ( isset($_GET['pagepass']) ) ? $_GET['pagepass'] : false;
+ $revid = ( isset($_GET['revid']) ) ? intval($_GET['revid']) : 0;
+ $page = new PageProcessor($paths->page_id, $paths->namespace, $revid);
+ $page->password = $password;
+
+ $have_draft = false;
+ // Kinda hacky fix for issue 7: draft restore not offered for nonexistent pages
+ if ( ($src = $page->fetch_source()) || !$page->exists() )
+ {
+ $allowed = true;
+ $q = $db->sql_query('SELECT author, time_id, page_text, edit_summary, page_format FROM ' . table_prefix . 'logs WHERE log_type = \'page\' AND action = \'edit\'
+ AND page_id = \'' . $db->escape($paths->page_id) . '\'
+ AND namespace = \'' . $db->escape($paths->namespace) . '\'
+ AND is_draft = 1;');
+ if ( !$q )
+ $db->die_json();
+
+ if ( $db->numrows() > 0 )
+ {
+ $have_draft = true;
+ $draft_row = $db->fetchrow($q);
+ }
+ }
+ else if ( $src !== false )
+ {
+ $allowed = true;
+ $src = '';
+ }
+ else
+ {
+ $allowed = false;
+ $src = '';
+ }
+
+ $auth_edit = ( $session->get_permissions('edit_page') && ( $session->get_permissions('even_when_protected') || !$page->ns->page_protected ) );
+ $auth_wysiwyg = ( $session->get_permissions('edit_wysiwyg') );
+
+ $return = array(
+ 'mode' => 'editor',
+ 'src' => $src,
+ 'auth_view_source' => $allowed,
+ 'auth_edit' => $auth_edit,
+ 'time' => time(),
+ 'require_captcha' => false,
+ 'allow_wysiwyg' => $auth_wysiwyg,
+ 'revid' => $revid,
+ 'have_draft' => false
+ );
+
+ $return['page_format'] = $page->ns->cdata['page_format'];
+ if ( $return['page_format'] == 'xhtml' )
+ {
+ // gently process headings to make tinymce format them correctly
+ if ( preg_match_all('/^ *?(={1,6}) *(.+?) *\\1 *$/m', $return['src'], $matches) )
+ {
+ foreach ( $matches[0] as $i => $match )
+ {
+ $hi = strlen($matches[1][$i]);
+ $heading = "<h{$hi}>{$matches[2][$i]}</h{$hi}>";
+ $return['src'] = str_replace_once($match, $heading, $return['src']);
+ }
+ }
+ }
+
+ if ( $have_draft )
+ {
+ $row =& $draft_row;
+ $return['have_draft'] = true;
+ $return['draft_author'] = $row['author'];
+ $return['draft_time'] = enano_date(ED_DATE | ED_TIME, intval($row['time_id']));
+ if ( isset($_GET['get_draft']) && @$_GET['get_draft'] === '1' )
+ {
+ $return['src'] = $row['page_text'];
+ $return['edit_summary'] = $row['edit_summary'];
+ $return['page_format'] = $row['page_format'];
+ }
+ }
+
+ $return['undo_info'] = array();
+
+ if ( $revid > 0 )
+ {
+ // Retrieve information about this revision and the current one
+ $q = $db->sql_query('SELECT l1.author AS currentrev_author, l2.author AS oldrev_author FROM ' . table_prefix . 'logs AS l1
+LEFT JOIN ' . table_prefix . 'logs AS l2
+ ON ( l2.log_id = ' . $revid . '
+ AND l2.log_type = \'page\'
+ AND l2.action = \'edit\'
+ AND l2.page_id = \'' . $db->escape($paths->page_id) . '\'
+ AND l2.namespace = \'' . $db->escape($paths->namespace) . '\'
+ AND l2.is_draft != 1
+ )
+WHERE l1.log_type = \'page\'
+ AND l1.action = \'edit\'
+ AND l1.page_id = \'' . $db->escape($paths->page_id) . '\'
+ AND l1.namespace = \'' . $db->escape($paths->namespace) . '\'
+ AND l1.time_id > ' . $page->revision_time . '
+ AND l1.is_draft != 1
+ORDER BY l1.time_id DESC;');
+ if ( !$q )
+ $db->die_json();
+
+ if ( $db->numrows() > 0 )
+ {
+ $rev_count = $db->numrows() - 1;
+ if ( $rev_count == -1 )
+ {
+ $return = array(
+ 'mode' => 'error',
+ 'error' => '[Internal] No rows returned by revision info query. SQL:<pre>' . $db->latest_query . '</pre>'
+ );
+ }
+ else
+ {
+ $row = $db->fetchrow();
+ $return['undo_info'] = array(
+ 'old_author' => $row['oldrev_author'],
+ 'current_author' => $row['currentrev_author'],
+ 'undo_count' => $rev_count
+ );
+ }
+ }
+ else
+ {
+ $return['revid'] = $revid = 0;
+ }
+ }
+
+ if ( $auth_edit && !$session->user_logged_in && getConfig('guest_edit_require_captcha') == '1' )
+ {
+ $return['require_captcha'] = true;
+ $return['captcha_id'] = $session->make_captcha();
+ }
+
+ $template->load_theme();
+ $return['toolbar_templates'] = $template->extract_vars('toolbar.tpl');
+ $return['edit_notice'] = $template->get_wiki_edit_notice();
+
+ echo enano_json_encode($return);
+ break;
+ case "getpage":
+ // echo PageUtils::getpage($paths->page, false, ( (isset($_GET['oldid'])) ? $_GET['oldid'] : false ));
+ $output = new Output_Striptease();
+
+ $revision_id = ( (isset($_GET['oldid'])) ? intval($_GET['oldid']) : 0 );
+ $page = new PageProcessor( $paths->page_id, $paths->namespace, $revision_id );
+
+ $pagepass = ( isset($_REQUEST['pagepass']) ) ? $_REQUEST['pagepass'] : '';
+ $page->password = $pagepass;
+ $page->allow_redir = ( !isset($_GET['redirect']) || (isset($_GET['redirect']) && $_GET['redirect'] !== 'no') );
+
+ $page->send();
+ break;
+ case "savepage":
+ /* **** OBSOLETE **** */
+
+ break;
+ case "savepage_json":
+ header('Content-type: application/json');
+ if ( !isset($_POST['r']) )
+ die('Invalid request');
+
+ try
+ {
+ $request = enano_json_decode($_POST['r']);
+ if ( !isset($request['src']) || !isset($request['summary']) || !isset($request['minor_edit']) || !isset($request['time']) || !isset($request['draft']) )
+ die('Invalid request');
+ }
+ catch(Zend_Json_Exception $e)
+ {
+ die("JSON parsing failed. View as HTML to see full report.\n<br /><br />\n<pre>" . htmlspecialchars(strval($e)) . "</pre><br />Request: <pre>" . htmlspecialchars($_POST['r']) . "</pre>");
+ }
+
+ $time = intval($request['time']);
+
+ if ( $request['draft'] )
+ {
+ //
+ // The user wants to save a draft version of the page.
+ //
+
+ // Validate permissions
+ if ( !$session->get_permissions('edit_page') )
+ {
+ $return = array(
+ 'mode' => 'error',
+ 'error' => 'access_denied'
+ );
+ }
+ else
+ {
+ // Delete any draft copies if they exist
+ $q = $db->sql_query('DELETE FROM ' . table_prefix . 'logs WHERE log_type = \'page\' AND action = \'edit\'
+ AND page_id = \'' . $db->escape($paths->page_id) . '\'
+ AND namespace = \'' . $db->escape($paths->namespace) . '\'
+ AND is_draft = 1;');
+ if ( !$q )
+ $db->die_json();
+
+ // are we just supposed to delete the draft?
+ if ( $request['src'] === -1 )
+ {
+ $return = array(
+ 'mode' => 'success',
+ 'is_draft' => 'delete'
+ );
+ }
+ else
+ {
+ $src = RenderMan::preprocess_text($request['src'], false, false);
+ $draft_format = $request['format'];
+ if ( !in_array($draft_format, array('xhtml', 'wikitext')) )
+ {
+ $return = array(
+ 'mode' => 'error',
+ 'error' => 'invalid_format'
+ );
+ }
+ else
+ {
+ // Save the draft
+ $q = $db->sql_query('INSERT INTO ' . table_prefix . 'logs ( log_type, action, page_id, namespace, author, author_uid, edit_summary, page_text, is_draft, time_id, page_format )
+ VALUES (
+ \'page\',
+ \'edit\',
+ \'' . $db->escape($paths->page_id) . '\',
+ \'' . $db->escape($paths->namespace) . '\',
+ \'' . $db->escape($session->username) . '\',
+ ' . $session->user_id . ',
+ \'' . $db->escape($request['summary']) . '\',
+ \'' . $db->escape($src) . '\',
+ 1,
+ ' . time() . ',
+ \'' . $draft_format . '\'
+ );');
+
+ // Done!
+ $return = array(
+ 'mode' => 'success',
+ 'is_draft' => true
+ );
+ }
+ }
+ }
+ }
+ else
+ {
+ // Verify that no edits have been made since the editor was requested
+ $q = $db->sql_query('SELECT time_id, author FROM ' . table_prefix . "logs WHERE log_type = 'page' AND action = 'edit' AND page_id = '{$paths->page_id}' AND namespace = '{$paths->namespace}' AND is_draft != 1 ORDER BY time_id DESC LIMIT 1;");
+ if ( !$q )
+ $db->die_json();
+
+ $row = $db->fetchrow();
+ $db->free_result();
+
+ if ( $row['time_id'] > $time )
+ {
+ $return = array(
+ 'mode' => 'obsolete',
+ 'author' => $row['author'],
+ 'date_string' => enano_date(ED_DATE | ED_TIME, $row['time_id']),
+ 'time' => $row['time_id'] // time() ???
+ );
+ echo enano_json_encode($return);
+ break;
+ }
+
+ // Verify captcha, if needed
+ if ( false && !$session->user_logged_in && getConfig('guest_edit_require_captcha') == '1' )
+ {
+ if ( !isset($request['captcha_id']) || !isset($request['captcha_code']) )
+ {
+ die('Invalid request, need captcha metadata');
+ }
+ $code_correct = strtolower($session->get_captcha($request['captcha_id']));
+ $code_input = strtolower($request['captcha_code']);
+ if ( $code_correct !== $code_input )
+ {
+ $return = array(
+ 'mode' => 'errors',
+ 'errors' => array($lang->get('editor_err_captcha_wrong')),
+ 'new_captcha' => $session->make_captcha()
+ );
+ echo enano_json_encode($return);
+ break;
+ }
+ }
+
+ // Verification complete. Start the PageProcessor and let it do the dirty work for us.
+ $page = new PageProcessor($paths->page_id, $paths->namespace);
+ if ( $page->update_page($request['src'], $request['summary'], ( $request['minor_edit'] == 1 ), $request['format']) )
+ {
+ $return = array(
+ 'mode' => 'success',
+ 'is_draft' => false
+ );
+ }
+ else
+ {
+ $errors = array();
+ while ( $err = $page->pop_error() )
+ {
+ $errors[] = $err;
+ }
+ $return = array(
+ 'mode' => 'errors',
+ 'errors' => array_values($errors)
+ );
+ if ( !$session->user_logged_in && getConfig('guest_edit_require_captcha') == '1' )
+ {
+ $return['new_captcha'] = $session->make_captcha();
+ }
+ }
+ }
+
+ // If this is based on a draft version, delete the draft - we no longer need it.
+ if ( @$request['used_draft'] && !$request['draft'] )
+ {
+ $q = $db->sql_query('DELETE FROM ' . table_prefix . 'logs WHERE log_type = \'page\' AND action = \'edit\'
+ AND page_id = \'' . $db->escape($paths->page_id) . '\'
+ AND namespace = \'' . $db->escape($paths->namespace) . '\'
+ AND is_draft = 1;');
+ }
+
+ echo enano_json_encode($return);
+
+ break;
+ case "diff_cur":
+
+ // Lie about our content type to fool ad scripts
+ header('Content-type: application/xhtml+xml');
+
+ if ( !isset($_POST['text']) )
+ die('Invalid request');
+
+ $page = new PageProcessor($paths->page_id, $paths->namespace);
+ if ( !($src = $page->fetch_source()) )
+ {
+ die('Access denied');
+ }
+
+ $diff = RenderMan::diff($src, $_POST['text']);
+ if ( $diff == '<table class="diff"></table>' )
+ {
+ $diff = '<p>' . $lang->get('editor_msg_diff_empty') . '</p>';
+ }
+
+ echo '<div class="info-box">' . $lang->get('editor_msg_diff') . '</div>';
+ echo $diff;
+
+ break;
+ case "protect":
+ // echo PageUtils::protect($paths->page_id, $paths->namespace, (int)$_POST['level'], $_POST['reason']);
+
+ if ( @$_POST['reason'] === '__ROLLBACK__' )
+ {
+ // __ROLLBACK__ is a keyword for log entries.
+ die('"__ROLLBACK__" ain\'t gonna do it, buddy. Try to _not_ use reserved keywords next time, ok?');
+ }
+
+ $page = new PageProcessor($paths->page_id, $paths->namespace);
+ header('Content-type: application/json');
+
+ $result = $page->protect_page(intval($_POST['level']), $_POST['reason']);
+ echo enano_json_encode($result);
+ break;
+ case "histlist":
+ require_once(ENANO_ROOT.'/includes/pageutils.php');
+ echo PageUtils::histlist($paths->page_id, $paths->namespace);
+ break;
+ case "rollback":
+ $id = intval(@$_GET['id']);
+ $page = new PageProcessor($paths->page_id, $paths->namespace);
+ header('Content-type: application/json');
+
+ $result = $page->rollback_log_entry($id);
+ echo enano_json_encode($result);
+ break;
+ case "comments":
+ require_once(ENANO_ROOT.'/includes/comment.php');
+ $comments = new Comments($paths->page_id, $paths->namespace);
+ if ( isset($_POST['data']) )
+ {
+ $comments->process_json($_POST['data']);
+ }
+ else
+ {
+ die('{ "mode" : "error", "error" : "No input" }');
+ }
+ break;
+ case "rename":
+ $page = new PageProcessor($paths->page_id, $paths->namespace);
+ header('Content-type: application/json');
+
+ $result = $page->rename_page($_POST['newtitle']);
+ echo enano_json_encode($result);
+ break;
+ case "flushlogs":
+ require_once(ENANO_ROOT.'/includes/pageutils.php');
+ echo PageUtils::flushlogs($paths->page_id, $paths->namespace);
+ break;
+ case "deletepage":
+ require_once(ENANO_ROOT.'/includes/pageutils.php');
+ $reason = ( isset($_POST['reason']) ) ? $_POST['reason'] : false;
+ if ( empty($reason) )
+ die($lang->get('page_err_need_reason'));
+ echo PageUtils::deletepage($paths->page_id, $paths->namespace, $reason);
+ break;
+ case "delvote":
+ require_once(ENANO_ROOT.'/includes/pageutils.php');
+ echo PageUtils::delvote($paths->page_id, $paths->namespace);
+ break;
+ case "resetdelvotes":
+ require_once(ENANO_ROOT.'/includes/pageutils.php');
+ echo PageUtils::resetdelvotes($paths->page_id, $paths->namespace);
+ break;
+ case "getstyles":
+ require_once(ENANO_ROOT.'/includes/pageutils.php');
+ echo PageUtils::getstyles($_GET['id']);
+ break;
+ case "catedit":
+ require_once(ENANO_ROOT.'/includes/pageutils.php');
+ echo PageUtils::catedit($paths->page_id, $paths->namespace);
+ break;
+ case "catsave":
+ require_once(ENANO_ROOT.'/includes/pageutils.php');
+ echo PageUtils::catsave($paths->page_id, $paths->namespace, $_POST);
+ break;
+ case "setwikimode":
+ require_once(ENANO_ROOT.'/includes/pageutils.php');
+ echo PageUtils::setwikimode($paths->page_id, $paths->namespace, (int)$_GET['mode']);
+ break;
+ case "setpass":
+ require_once(ENANO_ROOT.'/includes/pageutils.php');
+ echo PageUtils::setpass($paths->page_id, $paths->namespace, $_POST['password']);
+ break;
+ case "fillusername":
+ break;
+ case "fillpagename":
+ break;
+ case "preview":
+ require_once(ENANO_ROOT.'/includes/pageutils.php');
+ $template->init_vars();
+ echo PageUtils::genPreview($_POST['text']);
+ break;
+ case "transform":
+ header('Content-type: text/javascript');
+ if ( !isset($_GET['to']) )
+ {
+ echo enano_json_encode(array(
+ 'mode' => 'error',
+ 'error' => '"to" not specified'
+ ));
+ break;
+ }
+ if ( !isset($_POST['text']) )
+ {
+ echo enano_json_encode(array(
+ 'mode' => 'error',
+ 'error' => '"text" not specified (must be on POST)'
+ ));
+ break;
+ }
+ switch($_GET['to'])
+ {
+ case 'xhtml':
+ $result = RenderMan::render($_POST['text'], RENDER_BLOCK | RENDER_NOSMILIES, false);
+ break;
+ case 'wikitext':
+ $result = RenderMan::reverse_render($_POST['text']);
+ break;
+ default:
+ $text =& $_POST['text'];
+ $result = false;
+ $code = $plugins->setHook('ajax_transform');
+ foreach ( $code as $cmd )
+ {
+ eval($cmd);
+ }
+ if ( !$result )
+ {
+ echo enano_json_encode(array(
+ 'mode' => 'error',
+ 'error' => 'Invalid target format'
+ ));
+ break;
+ }
+ break;
+ }
+
+ // mostly for debugging, but I suppose this could be useful elsewhere.
+ if ( isset($_POST['plaintext']) )
+ die($result);
+
+ echo enano_json_encode(array(
+ 'mode' => 'transformed_text',
+ 'text' => $result
+ ));
+ break;
+ case "pagediff":
+ require_once(ENANO_ROOT.'/includes/pageutils.php');
+ $id1 = ( isset($_GET['diff1']) ) ? (int)$_GET['diff1'] : false;
+ $id2 = ( isset($_GET['diff2']) ) ? (int)$_GET['diff2'] : false;
+ if(!$id1 || !$id2) { echo '<p>Invalid request.</p>'; $template->footer(); break; }
+ if(!preg_match('#^([0-9]+)$#', (string)$_GET['diff1']) ||
+ !preg_match('#^([0-9]+)$#', (string)$_GET['diff2'] )) { echo '<p>SQL injection attempt</p>'; $template->footer(); break; }
+ echo PageUtils::pagediff($paths->page_id, $paths->namespace, $id1, $id2);
+ break;
+ case "jsres":
+ die('// ERROR: this section is deprecated and has moved to includes/clientside/static/enano-lib-basic.js.');
+ break;
+ case "rdns":
+ if(!$session->get_permissions('mod_misc')) die('Go somewhere else for your reverse DNS info!');
+ $ip = $_GET['ip'];
+ if ( !is_valid_ip($ip) )
+ {
+ echo $lang->get('acpsl_err_invalid_ip');
+ }
+ $rdns = gethostbyaddr($ip);
+ if ( $rdns == $ip )
+ echo $lang->get('acpsl_err_ptr_no_resolve');
+ else echo $rdns;
+ break;
+ case 'acljson':
+ require_once(ENANO_ROOT.'/includes/pageutils.php');
+ $parms = ( isset($_POST['acl_params']) ) ? rawurldecode($_POST['acl_params']) : false;
+ echo PageUtils::acl_json($parms);
+ break;
+ case 'theme_list':
+ header('Content-type: application/json');
+
+ $return = array();
+ foreach ( $template->theme_list as $theme )
+ {
+ if ( $theme['enabled'] != 1 )
+ continue;
+
+ $return[] = array(
+ 'theme_name' => $theme['theme_name'],
+ 'theme_id' => $theme['theme_id'],
+ 'have_thumb' => file_exists(ENANO_ROOT . "/themes/{$theme['theme_id']}/preview.png")
+ );
+ }
+
+ echo enano_json_encode($return);
+
+ break;
+ case "get_styles":
+ if ( !preg_match('/^[a-z0-9_-]+$/', $_GET['theme_id']) )
+ die(enano_json_encode(array()));
+
+ $theme_id = $_GET['theme_id'];
+ $return = array();
+
+ if ( $dr = @opendir(ENANO_ROOT . "/themes/$theme_id/css/") )
+ {
+ while ( $dh = @readdir($dr) )
+ {
+ if ( preg_match('/\.css$/', $dh) && $dh != '_printable.css' )
+ {
+ $return[] = preg_replace('/\.css$/', '', $dh);
+ }
+ }
+ }
+ else
+ {
+ $return = array(
+ 'mode' => 'error',
+ 'error' => 'Could not open directory.'
+ );
+ }
+ echo enano_json_encode($return);
+ break;
+ case "change_theme":
+ if ( !isset($_POST['theme_id']) || !isset($_POST['style_id']) )
+ {
+ die(enano_json_encode(array('mode' => 'error', 'error' => 'Invalid parameter')));
+ }
+ if ( !preg_match('/^([a-z0-9_-]+)$/i', $_POST['theme_id']) || !preg_match('/^([a-z0-9_-]+)$/i', $_POST['style_id']) )
+ {
+ die(enano_json_encode(array('mode' => 'error', 'error' => 'Invalid parameter')));
+ }
+ if ( !file_exists(ENANO_ROOT . '/themes/' . $_POST['theme_id'] . '/css/' . $_POST['style_id'] . '.css') )
+ {
+ die(enano_json_encode(array('mode' => 'error', 'error' => 'Can\'t find theme file: ' . ENANO_ROOT . '/themes/' . $_POST['theme_id'] . '/css/' . $_POST['style_id'] . '.css')));;
+ }
+ if ( !$session->user_logged_in )
+ {
+ die(enano_json_encode(array('mode' => 'error', 'error' => 'You must be logged in to change your theme')));
+ }
+ // Just in case something slipped through...
+ $theme_id = $db->escape($_POST['theme_id']);
+ $style_id = $db->escape($_POST['style_id']);
+ $e = $db->sql_query('UPDATE ' . table_prefix . "users SET theme = '$theme_id', style = '$style_id' WHERE user_id = $session->user_id;");
+ if ( !$e )
+ die( $db->get_error() );
+
+ echo enano_json_encode(array(
+ 'success' => true
+ ));
+ break;
+ case 'get_tags':
+
+ $ret = array('tags' => array(), 'user_level' => $session->user_level, 'can_add' => $session->get_permissions('tag_create'));
+ $q = $db->sql_query('SELECT t.tag_id, t.tag_name, pg.pg_target IS NOT NULL AS used_in_acl, t.user_id FROM '.table_prefix.'tags AS t
+ LEFT JOIN '.table_prefix.'page_groups AS pg
+ ON ( ( pg.pg_type = ' . PAGE_GRP_TAGGED . ' AND pg.pg_target=t.tag_name ) OR ( pg.pg_type IS NULL AND pg.pg_target IS NULL ) )
+ WHERE t.page_id=\'' . $db->escape($paths->page_id) . '\' AND t.namespace=\'' . $db->escape($paths->namespace) . '\';');
+ if ( !$q )
+ $db->_die();
+
+ while ( $row = $db->fetchrow() )
+ {
+ $can_del = true;
+
+ $perm = ( $row['user_id'] != $session->user_id ) ?
+ 'tag_delete_other' :
+ 'tag_delete_own';
+
+ if ( $row['user_id'] == 1 && !$session->user_logged_in )
+ // anonymous user trying to delete tag (hardcode blacklisted)
+ $can_del = false;
+
+ if ( !$session->get_permissions($perm) )
+ $can_del = false;
+
+ if ( $row['used_in_acl'] == 1 && !$session->get_permissions('edit_acl') && $session->user_level < USER_LEVEL_ADMIN )
+ $can_del = false;
+
+ $ret['tags'][] = array(
+ 'id' => $row['tag_id'],
+ 'name' => $row['tag_name'],
+ 'can_del' => $can_del,
+ 'acl' => ( $row['used_in_acl'] == 1 )
+ );
+ }
+
+ echo enano_json_encode($ret);
+
+ break;
+ case 'addtag':
+ $resp = array(
+ 'success' => false,
+ 'error' => 'No error',
+ 'can_del' => ( $session->get_permissions('tag_delete_own') && $session->user_logged_in ),
+ 'in_acl' => false
+ );
+
+ // first of course, are we allowed to tag pages?
+ if ( !$session->get_permissions('tag_create') )
+ {
+ $resp['error'] = 'You are not permitted to tag pages.';
+ die(enano_json_encode($resp));
+ }
+
+ // sanitize the tag name
+ $tag = sanitize_tag($_POST['tag']);
+ $tag = $db->escape($tag);
+
+ if ( strlen($tag) < 2 )
+ {
+ $resp['error'] = 'Tags must consist of at least 2 alphanumeric characters.';
+ die(enano_json_encode($resp));
+ }
+
+ // check if tag is already on page
+ $q = $db->sql_query('SELECT 1 FROM '.table_prefix.'tags WHERE page_id=\'' . $db->escape($paths->page_id) . '\' AND namespace=\'' . $db->escape($paths->namespace) . '\' AND tag_name=\'' . $tag . '\';');
+ if ( !$q )
+ $db->_die();
+ if ( $db->numrows() > 0 )
+ {
+ $resp['error'] = 'This page already has this tag.';
+ die(enano_json_encode($resp));
+ }
+ $db->free_result();
+
+ // tricky: make sure this tag isn't being used in some page group, and thus adding it could affect page access
+ $can_edit_acl = ( $session->get_permissions('edit_acl') || $session->user_level >= USER_LEVEL_ADMIN );
+ $q = $db->sql_query('SELECT 1 FROM '.table_prefix.'page_groups WHERE pg_type=' . PAGE_GRP_TAGGED . ' AND pg_target=\'' . $tag . '\';');
+ if ( !$q )
+ $db->_die();
+ if ( $db->numrows() > 0 && !$can_edit_acl )
+ {
+ $resp['error'] = 'This tag is used in an ACL page group, and thus can\'t be added to a page by people without administrator privileges.';
+ die(enano_json_encode($resp));
+ }
+ $resp['in_acl'] = ( $db->numrows() > 0 );
+ $db->free_result();
+
+ // we're good
+ $q = $db->sql_query('INSERT INTO '.table_prefix.'tags(tag_name,page_id,namespace,user_id) VALUES(\'' . $tag . '\', \'' . $db->escape($paths->page_id) . '\', \'' . $db->escape($paths->namespace) . '\', ' . $session->user_id . ');');
+ if ( !$q )
+ $db->_die();
+
+ $resp['success'] = true;
+ $resp['tag'] = $tag;
+ $resp['tag_id'] = $db->insert_id();
+
+ echo enano_json_encode($resp);
+ break;
+ case 'deltag':
+
+ $tag_id = intval($_POST['tag_id']);
+ if ( empty($tag_id) )
+ die('Invalid tag ID');
+
+ $q = $db->sql_query('SELECT t.tag_id, t.user_id, t.page_id, t.namespace, pg.pg_target IS NOT NULL AS used_in_acl FROM '.table_prefix.'tags AS t
+LEFT JOIN '.table_prefix.'page_groups AS pg
+ ON ( pg.pg_id IS NULL OR ( pg.pg_target = t.tag_name AND pg.pg_type = ' . PAGE_GRP_TAGGED . ' ) )
+WHERE t.tag_id=' . $tag_id . ';');
+
+ if ( !$q )
+ $db->_die();
+
+ if ( $db->numrows() < 1 )
+ die('Could not find a tag with that ID');
+
+ $row = $db->fetchrow();
+ $db->free_result();
+
+ if ( $row['page_id'] == $paths->page_id && $row['namespace'] == $paths->namespace )
+ $perms =& $session;
+ else
+ $perms = $session->fetch_page_acl($row['page_id'], $row['namespace']);
+
+ $perm = ( $row['user_id'] != $session->user_id ) ?
+ 'tag_delete_other' :
+ 'tag_delete_own';
+
+ if ( $row['user_id'] == 1 && !$session->user_logged_in )
+ // anonymous user trying to delete tag (hardcode blacklisted)
+ die('You are not authorized to delete this tag.');
+
+ if ( !$perms->get_permissions($perm) )
+ die('You are not authorized to delete this tag.');
+
+ if ( $row['used_in_acl'] == 1 && !$perms->get_permissions('edit_acl') && $session->user_level < USER_LEVEL_ADMIN )
+ die('You are not authorized to delete this tag.');
+
+ // We're good
+ $q = $db->sql_query('DELETE FROM '.table_prefix.'tags WHERE tag_id = ' . $tag_id . ';');
+ if ( !$q )
+ $db->_die();
+
+ echo 'success';
+
+ break;
+ case 'ping':
+ echo 'pong';
+ break;
+ default:
+ die('Hacking attempt');
+ break;
+}
+
?>
\ No newline at end of file