SECURITY: CSRF protection in Private Messaging, which is a really broken feature and should get the TinyMCE treatment. *sigh* Reported by Secunia.
<?php
/**!info**
{
"Plugin Name" : "plugin_specialpagefuncs_title",
"Plugin URI" : "http://enanocms.org/",
"Description" : "plugin_specialpagefuncs_desc",
"Author" : "Dan Fuhry",
"Version" : "1.1.6",
"Author URI" : "http://enanocms.org/"
}
**!*/
/*
* Enano - an open-source CMS capable of wiki functions, Drupal-like sidebar blocks, and everything in between
* Copyright (C) 2006-2009 Dan Fuhry
*
* This program is Free Software; you can redistribute and/or modify it under the terms of the GNU General Public License
* as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.
*
* This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied
* warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for details.
*/
global $db, $session, $paths, $template, $plugins; // Common objects
// $plugins->attachHook('session_started', 'SpecialPageFuncs_paths_init();');
function SpecialPageFuncs_paths_init()
{
register_special_page('CreatePage', 'specialpage_create_page');
register_special_page('AllPages', 'specialpage_all_pages');
register_special_page('SpecialPages', 'specialpage_special_pages');
register_special_page('About_Enano', 'specialpage_about_enano');
register_special_page('GNU_General_Public_License', 'specialpage_gnu_gpl');
register_special_page('TagCloud', 'specialpage_tag_cloud');
register_special_page('Autofill', 'specialpage_autofill', false);
register_special_page('AjaxUpload', 'specialpage_ajaxupload', false);
}
// function names are IMPORTANT!!! The name pattern is: page_<namespace ID>_<page URLname, without namespace>
function page_Special_CreatePage()
{
global $db, $session, $paths, $template, $plugins; // Common objects
global $lang;
$whitelist_ns = array('Article', 'User', 'Help', 'Template', 'Category', 'Project');
if ( $session->user_level >= USER_LEVEL_ADMIN )
{
$whitelist_ns[] = 'System';
}
$code = $plugins->setHook('page_create_ns_whitelist');
foreach ( $code as $cmd )
{
eval($cmd);
}
$errors = array();
switch ( isset($_POST['page_title']) )
{
case true:
// "Create page" was clicked
//
// VALIDATION CODE
//
// Check namespace
$namespace = ( isset($_POST['namespace']) ) ? $_POST['namespace'] : 'Article';
if ( !in_array($namespace, $whitelist_ns) )
{
$errors[] = $lang->get('pagetools_create_err_invalid_namespace');
}
// Check title and figure out urlname
$title = $_POST['page_title'];
$urlname = $_POST['page_title'];
if ( @$_POST['custom_url'] === 'yes' && isset($_POST['urlname']) )
{
$urlname = $_POST['urlname'];
}
$urlname = sanitize_page_id($urlname);
if ( $urlname == '.00' || empty($urlname) )
{
$errors[] = $lang->get('pagetools_create_err_invalid_urlname');
}
// Validate page existence
$pathskey = $paths->nslist[$namespace] . $urlname;
if ( isPage($pathskey) )
{
$errors[] = $lang->get('pagetools_create_err_already_exists');
}
// Validate permissions
$perms = $session->fetch_page_acl($urlname, $namespace);
if ( !$perms->get_permissions('create_page') )
{
$errors[] = $lang->get('pagetools_create_err_no_permission');
}
// Run hooks
$code = $plugins->setHook('page_create_request');
foreach ( $code as $cmd )
{
eval($cmd);
}
// Create the page
if ( count($errors) < 1 )
{
$page = new PageProcessor($urlname, $namespace);
$page->create_page($title);
if ( $error = $page->pop_error() )
{
do
{
$errors[] = $error;
}
while ( $error = $page->pop_error() );
}
else
{
redirect(makeUrlNS($namespace, $urlname) . '#do:edit', '', '', 0);
return true;
}
}
break;
}
$template->header();
echo $lang->get('pagetools_create_blurb');
if ( count($errors) > 0 )
{
echo '<div class="error-box">' . implode("<br />\n ", $errors) . '</div>';
}
?>
<enano:no-opt>
<script type="text/javascript">
window.cpGenPreviewUrl = function()
{
if ( typeof(load_component) != 'function' )
return false;
var frm = document.forms['create_form'];
var radio_custom = frm.getElementsByTagName('input')[2];
var use_custom_url = radio_custom.checked;
if ( use_custom_url )
{
var title_src = frm.urlname.value;
}
else
{
var title_src = frm.page_title.value;
}
var url = window.location.protocol + '//' + window.location.hostname + contentPath + namespace_list[frm.namespace.value] + sanitize_page_id(title_src);
document.getElementById('createpage_url_preview').firstChild.nodeValue = url;
}
</script>
</enano:no-opt>
<?php
echo '<form action="' . makeUrlNS('Special', 'CreatePage') . '" method="post" name="create_form">';
echo '<p>';
echo $lang->get('pagetools_create_field_title');
echo ' <input onkeyup="cpGenPreviewUrl();" type="text" name="page_title" size="40" tabindex="1" />';
echo '</p>';
echo '<p>';
echo $lang->get('pagetools_create_field_namespace');
echo ' <select onchange="cpGenPreviewUrl();" name="namespace" tabindex="2">';
foreach ( $paths->nslist as $ns => $ns_prefix )
{
if ( !in_array($ns, $whitelist_ns) )
continue;
$lang_string = 'onpage_lbl_page_' . strtolower($ns);
$str = $lang->get($lang_string);
if ( $str == $lang_string )
$str = $ns;
echo '<option value="' . $ns . '">' . ucwords($str) . '</option>';
}
echo '</select>';
echo '</p>';
echo '<fieldset enano:expand="closed">';
echo '<legend>' . $lang->get('pagetools_create_group_advanced') . '</legend>';
echo '<p>';
echo '<label><input tabindex="3" type="radio" name="custom_url" value="no" checked="checked" onclick="cpGenPreviewUrl(); document.getElementById(\'createpage_custom_url\').style.display = \'none\';" /> ' . $lang->get('pagetools_create_field_url_auto') . '</label>';
echo '</p>';
echo '<p>';
echo '<label><input tabindex="3" type="radio" name="custom_url" value="yes" onclick="cpGenPreviewUrl(); document.getElementById(\'createpage_custom_url\').style.display = \'block\';" /> ' . $lang->get('pagetools_create_field_url_manual') . '</label>';
echo '</p>';
echo '<p id="createpage_custom_url" style="display: none; margin-left: 2em;">';
echo $lang->get('pagetools_create_field_url');
echo ' <input onkeyup="cpGenPreviewUrl();" tabindex="4" type="text" name="urlname" value="" size="40" />';
echo '</p>';
echo '<p>';
echo $lang->get('pagetools_create_field_preview') . ' <tt id="createpage_url_preview"> </tt><br />';
echo '<small>' . $lang->get('pagetools_create_field_preview_hint') . '</small>';
echo '</p>';
echo '</fieldset>';
echo '<p>';
echo '<input tabindex="5" type="submit" value="' . $lang->get('pagetools_create_btn_create') . '" />';
echo '</p>';
echo '</form>';
echo '<script type="text/javascript">addOnloadHook(cpGenPreviewUrl); addOnloadHook(function(){load_component(\'expander\')});</script>';
$template->footer();
}
function PagelistingFormatter($id, $row)
{
global $db, $session, $paths, $template, $plugins; // Common objects
static $rowtracker = 0;
static $tdclass = 'row2';
static $per_row = 2;
static $first = true;
$return = '';
if ( $id === false && $row === false )
{
$rowtracker = 0;
$first = true;
return false;
}
$rowtracker++;
if ( $rowtracker == $per_row || $first )
{
$rowtracker = 0;
$tdclass = ( $tdclass == 'row2' ) ? 'row1' : 'row2';
}
if ( $rowtracker == 0 && !$first )
$return .= "</tr>\n<tr>";
$first = false;
preg_match('/^ns=(' . implode('|', array_keys($paths->nslist)) . ');pid=(.*?)$/i', $id, $match);
$namespace =& $match[1];
$page_id =& $match[2];
$page_id = sanitize_page_id($page_id);
$url = makeUrlNS($namespace, $page_id);
$url = htmlspecialchars($url);
$link = '<a href="' . $url . '">' . htmlspecialchars($row['name']) . '</a>';
$td = '<td class="' . $tdclass . '" style="width: 50%;">' . $link . '</td>';
$return .= $td;
return $return;
}
function page_Special_AllPages()
{
// This should be an easy one
global $db, $session, $paths, $template, $plugins; // Common objects
global $lang;
$template->header();
echo '<p>' . $lang->get('pagetools_allpages_blurb') . '</p>';
$q = $db->sql_query('SELECT COUNT(urlname) FROM '.table_prefix.'pages WHERE visible!=0;');
if ( !$q )
$db->_die();
$row = $db->fetchrow_num();
$count = $row[0];
$sz =& $count;
switch($count % 4)
{
case 0:
case 2:
// even number of results; do nothing
$last_cell = '';
break;
case 1:
// odd number of results and odd number of rows, use row1
$last_cell = '<td class="row1"></td>';
break;
case 3:
// odd number of results and even number of rows, use row2
$last_cell = '<td class="row2"></td>';
break;
}
$db->free_result();
// This query needs to be generated based on the DBMS
$concat_column = ENANO_DBLAYER == 'MYSQL'
? 'CONCAT("ns=",namespace,";pid=",urlname)'
: "'ns=' || namespace || ';pid=' || urlname";
$q = $db->sql_unbuffered_query("SELECT $concat_column AS identifier, name FROM " . table_prefix . "pages WHERE visible != 0 ORDER BY name ASC;");
if ( !$q )
$db->_die();
$offset = ( isset($_GET['offset']) ) ? intval($_GET['offset']) : 0;
// reset formatter
PagelistingFormatter(false, false);
$result = paginate(
$q, // result resource
'{identifier}', // formatting template
$count, // # of results
makeUrlNS('Special', 'AllPages', 'offset=%s'), // result URL
$offset, // start offset
40, // results per page
array( 'identifier' => 'PagelistingFormatter' ), // hooks
'<div class="tblholder">
<table border="0" cellspacing="1" cellpadding="4">
<tr>', // print at start
' ' . $last_cell . '</tr>
</table>
</div>' // print at end
);
echo $result;
$template->footer();
}
function page_Special_SpecialPages()
{
// This should be an easy one
global $db, $session, $paths, $template, $plugins; // Common objects
global $lang;
$template->header();
echo '<p>' . $lang->get('pagetools_specialpages_blurb') . '</p><div class="tblholder"><table border="0" width="100%" cellspacing="1" cellpadding="4"><tr>';
$cclass = 'row1';
$i = -1;
foreach ( $paths->pages as $cdata )
{
if ( $cdata['namespace'] != 'Special' )
continue;
$i++;
if ( $i % 2 == 0 && $i > 0 )
{
echo '</tr><tr>';
$cclass = ( $cclass == 'row1' ) ? 'row3' : 'row1';
}
echo '<td style="width: 50%;" class="' . $cclass . '">';
echo '<a href="' . makeUrl($cdata['urlname']) . '">';
echo htmlspecialchars($lang->get($cdata['name']));
echo '</a>';
echo '</td>';
}
// close up the table if necessary
if ( $i % 2 == 0 )
{
echo "<td class=\"$cclass\"></td>";
}
echo '</table></div>';
$template->footer();
}
function page_Special_About_Enano()
{
global $db, $session, $paths, $template, $plugins; // Common objects
global $lang;
$platform = 'Unknown';
$uname = @file_get_contents('/proc/sys/kernel/ostype');
if($uname == "Linux\n")
$platform = 'Linux';
else if(@file_exists('/hurd/pfinet')) // I have a little experience with GNU/Hurd :-) http://hurdvm.enanocms.org/
$platform = 'GNU/Hurd';
else if(strtolower(PHP_OS) == 'winnt')
$platform = 'Windows NT';
else if(strtolower(PHP_OS) == 'win32')
$platform = 'Windows 9x/DOS';
else if(@file_exists('/System/Library/CoreServices/SystemVersion.plist'))
$platform = 'Mac OS X';
else if(@file_exists('/bin/bash'))
$platform = 'Other GNU';
else if(@is_dir('/bin'))
$platform = 'Other POSIX';
$template->header();
?>
<br />
<div class="tblholder">
<table border="0" cellspacing="1" cellpadding="4">
<tr><th colspan="2" style="text-align: left;"><?php echo $lang->get('meta_enano_about_th'); ?></th></tr>
<tr><td colspan="2" class="row3">
<?php
echo $lang->get('meta_enano_about_poweredby', array(
'year' => date('Y')
));
$subst = array(
'gpl_link' => makeUrlNS('Special', 'GNU_General_Public_License')
);
echo $lang->get('meta_enano_about_gpl', $subst);
if ( $lang->lang_code != 'eng' ):
// Do not remove this block of code. Doing so is a violation of the GPL. (A copy of the GPL in other languages
// must be accompanied by a copy of the English GPL.)
?>
<h3>(English)</h3>
<p>
This website is powered by <a href="http://enanocms.org/">Enano</a>, the lightweight and open source CMS that everyone can use.
Enano is copyright © 2006-<?php echo date('Y'); ?> Dan Fuhry. For legal information, along with a list of libraries that
Enano uses, please see <a href="http://enanocms.org/Legal_information">Legal Information</a>.
</p>
<p>
The developers and maintainers of Enano strongly believe that software should not only be free to use, but free to be modified,
distributed, and used to create derivative works. To help achieve this goal, we use licensing terms that require you to pass on
the freedoms we give you when you share Enano. For more information about Free Software, check out the
<a href="http://en.wikipedia.org/wiki/Free_Software" onclick="window.open(this.href); return false;">Wikipedia page</a> or
the <a href="http://www.fsf.org/" onclick="window.open(this.href); return false;">Free Software Foundation's</a> homepage.
</p>
<p>
This program is Free Software; you can redistribute it and/or modify it under the terms of the GNU General Public License
as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.
</p>
<p>
This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied
warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for details.
</p>
<p>
You should have received <a href="<?php echo makeUrlNS('Special', 'GNU_General_Public_License'); ?>">a copy of
the GNU General Public License</a> along with this program; if not, write to:
</p>
<p style="margin-left 2em;">
Free Software Foundation, Inc.,<br />
51 Franklin Street, Fifth Floor<br />
Boston, MA 02110-1301, USA
</p>
<p>
Alternatively, you can <a href="http://www.gnu.org/licenses/old-licenses/gpl-2.0.html">read it online</a>.
</p>
<?php
endif;
?>
</td></tr>
<tr>
<td class="row2" colspan="2">
<table border="0" style="margin: 0 auto; background: none; width: 100%;" cellpadding="5">
<tr>
<td style="text-align: center;">
<?php echo $template->fading_button; ?>
</td>
<td style="text-align: center;">
<a href="http://www.php.net/" onclick="window.open(this.href); return false;" style="background: none; padding: 0;">
<img alt="Written in PHP" src="<?php echo scriptPath; ?>/images/about-powered-php.png" style="border-width: 0px;" width="88" height="31" />
</a>
</td>
<td style="text-align: center;">
<?php
switch(ENANO_DBLAYER)
{
case 'MYSQL':
?>
<a href="http://www.mysql.com/" onclick="window.open(this.href); return false;" style="background: none; padding: 0;">
<img alt="Database engine powered by MySQL" src="<?php echo scriptPath; ?>/images/about-powered-mysql.png" style="border-width: 0px;" width="88" height="31" />
</a>
<?php
break;
case 'PGSQL':
?>
<a href="http://www.postgresql.org/" onclick="window.open(this.href); return false;" style="background: none; padding: 0;">
<img alt="Database engine powered by PostgreSQL" src="<?php echo scriptPath; ?>/images/about-powered-pgsql.png" style="border-width: 0px;" width="90" height="30" />
</a>
<?php
break;
}
?>
</td>
</tr>
</table>
</td>
</tr>
<tr><td style="width: 100px;" class="row1"><?php echo $lang->get('meta_enano_about_lbl_enanoversion'); ?></td><td class="row1"><?php echo enano_version(true) . ' (' . enano_codename() . ')'; ?></td></tr>
<tr><td style="width: 100px;" class="row2"><?php echo $lang->get('meta_enano_about_lbl_webserver'); ?></td><td class="row2"><?php if(isset($_SERVER['SERVER_SOFTWARE'])) echo $_SERVER['SERVER_SOFTWARE']; else echo 'Unable to determine web server software.'; ?></td></tr>
<tr><td style="width: 100px;" class="row1"><?php echo $lang->get('meta_enano_about_lbl_serverplatform'); ?></td><td class="row1"><?php echo $platform; ?></td></tr>
<tr><td style="width: 100px;" class="row2"><?php echo $lang->get('meta_enano_about_lbl_phpversion'); ?></td><td class="row2"><?php echo PHP_VERSION; ?></td></tr>
<?php
switch(ENANO_DBLAYER)
{
case 'MYSQL':
?>
<tr><td style="width: 100px;" class="row1"><?php echo $lang->get('meta_enano_about_lbl_mysqlversion'); ?></td><td class="row1"><?php echo mysql_get_server_info($db->_conn); ?></td></tr>
<?php
break;
case 'PGSQL':
$pg_serverdata = pg_version($db->_conn);
$pg_version = $pg_serverdata['server'];
?>
<tr><td style="width: 100px;" class="row1"><?php echo $lang->get('meta_enano_about_lbl_pgsqlversion'); ?></td><td class="row1"><?php echo $pg_version; ?></td></tr>
<?php
break;
}
?>
</table>
</div>
<?php
$template->footer();
}
function page_Special_GNU_General_Public_License()
{
global $db, $session, $paths, $template, $plugins; // Common objects
global $lang;
$template->header();
if(file_exists(ENANO_ROOT . '/GPL'))
{
echo '<p>' . $lang->get('pagetools_gpl_blurb', array('about_url' => makeUrlNS('Special', 'About_Enano'))) . '</p>';
if ( $lang->lang_code != 'eng' ):
// Do not remove this block of code. Doing so is a violation of the GPL. (A copy of the GPL in other languages
// must be accompanied by a copy of the English GPL.)
echo '<p>The following text represents the license that the <a href="'.makeUrlNS('Special', 'About_Enano').'">Enano</a> content management system is under. To make it easier to read, the text has been wiki-formatted; in no other way has it been changed.</p>';
endif;
if ( file_exists(ENANO_ROOT . "/GPL_{$lang->lang_code}") )
{
echo '<h2>' . $lang->get('pagetools_gpl_title_native') . '</h2>';
echo '<p><a href="#gpl_english">' . $lang->get('pagetools_gpl_link_to_english') . ' / View the license in English' . '</a></p>';
echo RenderMan::render( file_get_contents ( ENANO_ROOT . "/GPL_{$lang->lang_code}" ) );
echo '<h2>' . $lang->get('pagetools_gpl_title_english') . ' / English version<a name="gpl_english" id="gpl_english"></a></h2>';
}
echo RenderMan::render( file_get_contents ( ENANO_ROOT . '/GPL' ) );
}
else
{
echo '<p>' . $lang->get('pagetools_gpl_err_file_missing') . '</p>';
if ( $lang->lang_code != 'eng')
// Also print out English version
// Do not remove the following line of code; doing so would be a violation of the GPL.
echo '<p>It appears that the file "GPL" is missing from your Enano installation. You may find a wiki-formatted copy of the GPL at: <a href="http://enanocms.org/GPL">http://enanocms.org/GPL</a>. In the mean time, you may wish to contact the site administration and ask them to replace the GPL file.</p>';
}
$template->footer();
}
function page_Special_TagCloud()
{
global $db, $session, $paths, $template, $plugins; // Common objects
global $lang;
$template->header();
if ( $tag = $paths->getParam(0) )
{
$tag = sanitize_tag($tag);
$q = $db->sql_query('SELECT page_id, namespace FROM '.table_prefix.'tags WHERE tag_name=\'' . $db->escape($tag) . '\';');
if ( !$q )
$db->_die();
if ( $row = $db->fetchrow() )
{
echo '<div class="tblholder">
<table border="0" cellspacing="1" cellpadding="4">';
echo '<tr><th colspan="2">' . $lang->get('pagetools_tagcloud_pagelist_th', array('tag' => htmlspecialchars($tag))) . '</th></tr>';
echo '<tr>';
$i = 0;
$td_class = 'row1';
do
{
if ( $i % 2 == 0 && $i > 1 )
{
$td_class = ( $td_class == 'row2' ) ? 'row1' : 'row2';
echo '</tr><tr>';
}
$i++;
$title = get_page_title_ns($row['page_id'], $row['namespace']);
if ( $row['namespace'] != 'Article' && isset($paths->nslist[$row['namespace']]) )
$title = $paths->nslist[$row['namespace']] . $title;
$url = makeUrlNS($row['namespace'], $row['page_id']);
$class = ( isPage( $paths->nslist[$row['namespace']] . $row['page_id'] ) ) ? '' : ' class="wikilink-nonexistent"';
$link = '<a href="' . htmlspecialchars($url) . '"' . $class . '>' . htmlspecialchars($title) . '</a>';
echo "<td class=\"$td_class\" style=\"width: 50%;\">$link</td>";
// " workaround for jEdit highlighting bug
}
while ( $row = $db->fetchrow() );
while ( $i % 2 > 0 )
{
$i++;
echo "<td class=\"$td_class\" style=\"width: 50%;\"></td>";
}
// " workaround for jEdit highlighting bug
echo '<tr>
<th colspan="2" class="subhead"><a href="' . makeUrlNS('Special', 'TagCloud') . '">« ' . $lang->get('pagetools_tagcloud_btn_return') . '</a></th>
</tr>';
echo '</table>';
echo '</div>';
}
}
else
{
$cloud = new TagCloud();
$q = $db->sql_query('SELECT tag_name FROM '.table_prefix.'tags;');
if ( !$q )
$db->_die();
if ( $db->numrows() < 1 )
{
echo '<p>' . $lang->get('pagetools_tagcloud_msg_no_tags') . '</p>';
}
else
{
echo '<h3>' . $lang->get('pagetools_tagcloud_blurb') . '</h3>';
while ( $row = $db->fetchrow() )
{
$cloud->add_word($row['tag_name']);
}
echo $cloud->make_html('normal');
echo '<p>' . $lang->get('pagetools_tagcloud_instructions') . '</p>';
}
}
$template->footer();
}
function page_Special_Autofill()
{
global $db, $session, $paths, $template, $plugins; // Common objects
global $lang;
require_once(ENANO_ROOT . '/includes/search.php');
header('Content-type: text/javascript');
$dataset = array();
if ( isset($_GET['type']) )
{
switch($_GET['type'])
{
case 'username':
if ( isset($_GET['userinput']) && strlen($_GET['userinput']) >= 3 )
{
$search = '%' . escape_string_like($_GET['userinput']) . '%';
$lsearch = strtolower($search);
$min_id = ( isset($_GET['allow_anon']) && $_GET['allow_anon'] == '1' ) ? '1' : '2';
$q = $db->sql_query('SELECT username FROM ' . table_prefix . "users WHERE (" . ENANO_SQLFUNC_LOWERCASE . "(username) LIKE '$lsearch' OR username LIKE '$search') AND user_id >= $min_id");
if ( !$q )
$db->die_json();
while ( $row = $db->fetchrow($q) )
{
$key = array(
'name' => $row['username'],
'name_highlight' => highlight_term($_GET['userinput'], $row['username'], '<b>', '</b>')
);
$key = array_merge($key, $session->get_user_rank($row['username']));
$key['rank_title'] = $lang->get($key['rank_title']);
$key[0] = $row['username'];
$dataset[] = $key;
// $dataset[] = array($row['username'], $row['username']);
// echo "{$row['username']}|{$row['username']}\n";
}
}
// return;
break;
case 'page':
if ( isset($_GET['userinput']) && strlen($_GET['userinput']) >= 3 )
{
$search = '%' . escape_string_like($_GET['userinput']) . '%';
$q = $db->sql_query('SELECT urlname, namespace, name FROM ' . table_prefix . "pages\n"
. " WHERE (\n"
. " " . ENANO_SQLFUNC_LOWERCASE . "(urlname) LIKE '$search'\n"
. " OR " . ENANO_SQLFUNC_LOWERCASE . "(name) LIKE '$search'\n"
. " );");
if ( !$q )
$db->die_json();
while ( $row = $db->fetchrow() )
{
$pathskey = ( isset($paths->nslist[$row['namespace']]) ? $paths->nslist[$row['namespace']] : $row['namespace'] . substr($paths->nslist['Special'], -1) ) . $row['urlname'];
$key = array(
0 => $pathskey,
'pid_highlight' => highlight_term($_GET['userinput'], dirtify_page_id($pathskey), '<b>', '</b>'),
'name_highlight' => highlight_term($_GET['userinput'], $row['name'], '<b>', '</b>')
);
$dataset[] = $key;
}
}
break;
default:
$code = $plugins->setHook('autofill_json_request');
foreach ( $code as $cmd )
{
eval($cmd);
}
break;
}
}
echo enano_json_encode($dataset);
}
function page_Special_AjaxUpload()
{
if ( isset($_GET['uploadstatus']) )
{
session_start();
header('Content-type: text/javascript');
$key = "upload_progress_{$_GET['uploadstatus']}";
$info = isset($_SESSION[$key]) ? $_SESSION[$key] : array();
if ( isset($_SESSION[$key]) && $_SESSION[$key]['done'] )
unset($_SESSION[$key]);
if ( is_array($info) )
{
$info['current_time'] = time();
if ( !empty($_GET['cancel']) )
$_SESSION[$key]['cancel_upload'] = $info['cancel_upload'] = true;
}
$info['form'] = $_GET['form'];
echo enano_json_encode($info);
exit;
}
}
?>