diff -r 0f039028f7a5 -r 7846d45bd250 index.php --- a/index.php Thu Nov 22 02:10:12 2007 -0500 +++ b/index.php Fri Nov 23 17:59:24 2007 -0500 @@ -54,7 +54,7 @@ switch($_GET['do']) { default: - die_friendly('Invalid action', '

The action "'.$_GET['do'].'" is not defined. Return to viewing this page\'s text.

'); + die_friendly('Invalid action', '

The action "'.htmlspecialchars($_GET['do']).'" is not defined. Return to viewing this page\'s text.

'); break; case 'view': // echo PageUtils::getpage($paths->page, true, ( (isset($_GET['oldid'])) ? $_GET['oldid'] : false )); @@ -117,10 +117,18 @@ $template->footer(); break; case 'edit': - if(isset($_POST['_cancel'])) { header('Location: '.makeUrl($paths->page)); echo 'Redirecting...If you haven\'t been redirected yet, click here.'; break; } - if(isset($_POST['_save'])) { + if(isset($_POST['_cancel'])) + { + redirect(makeUrl($paths->page), '', '', 0); + break; + } + if(isset($_POST['_save'])) + { $e = PageUtils::savepage($paths->cpage['urlname_nons'], $paths->namespace, $_POST['page_text'], $_POST['edit_summary'], isset($_POST['minor'])); - header('Location: '.makeUrl($paths->page)); echo 'Redirecting...If you haven\'t been redirected yet, click here.'; break; + if ( $e == 'good' ) + { + redirect(makeUrl($paths->page), 'Changes saved', 'Your changes to this page have been saved. Redirecting...', 3); + } } $template->header(); if(isset($_POST['_preview']))