includes/EditPage.php

   1 <?php
   2 /**
   3  * Contain the EditPage class
   4  * @package MediaWiki
   5  */
   6
   7 /**
   8  * Splitting edit page/HTML interface from Article...
   9  * The actual database and text munging is still in Article,
  10  * but it should get easier to call those from alternate
  11  * interfaces.
  12  *
  13  * @package MediaWiki
  14  */
  15
  16 class EditPage {
  17         var $mArticle;
  18         var $mTitle;
  19         var $mMetaData = '';
  20         var $isConflict = false;
  21         var $isCssJsSubpage = false;
  22         var $deletedSinceEdit = false;
  23         var $formtype;
  24         var $firsttime;
  25         var $lastDelete;
  26         var $mTokenOk = false;
  27         var $mTriedSave = false;
  28         var $tooBig = false;
  29         var $kblength = false;
  30         var $missingComment = false;
  31         var $missingSummary = false;
  32         var $allowBlankSummary = false;
  33         var $autoSumm = '';
  34         var $hookError = '';
  35
  36         # Form values
  37         var $save = false, $preview = false, $diff = false;
  38         var $minoredit = false, $watchthis = false, $recreate = false;
  39         var $textbox1 = '', $textbox2 = '', $summary = '';
  40         var $edittime = '', $section = '', $starttime = '';
  41         var $oldid = 0, $editintro = '', $scrolltop = null;
  42
  43         /**
  44          * @todo document
  45          * @param $article
  46          */
  47         function EditPage( $article ) {
  48                 $this->mArticle =& $article;
  49                 global $wgTitle;
  50                 $this->mTitle =& $wgTitle;
  51         }
  52
  53         /**
  54          * Fetch initial editing page content.
  55          */
  56         private function getContent() {
  57                 global $wgRequest, $wgParser;
  58
  59                 # Get variables from query string :P
  60                 $section = $wgRequest->getVal( 'section' );
  61                 $preload = $wgRequest->getVal( 'preload' );
  62
  63                 wfProfileIn( __METHOD__ );
  64
  65                 $text = '';
  66                 if( !$this->mTitle->exists() ) {
  67
  68                         # If requested, preload some text.
  69                         $text = $this->getPreloadedText( $preload );
  70
  71                         # We used to put MediaWiki:Newarticletext here if
  72                         # $text was empty at this point.
  73                         # This is now shown above the edit box instead.
  74                 } else {
  75                         // FIXME: may be better to use Revision class directly
  76                         // But don't mess with it just yet. Article knows how to
  77                         // fetch the page record from the high-priority server,
  78                         // which is needed to guarantee we don't pick up lagged
  79                         // information.
  80
  81                         $text = $this->mArticle->getContent();
  82
  83                         if( $section != '' ) {
  84                                 if( $section == 'new' ) {
  85                                         $text = $this->getPreloadedText( $preload );
  86                                 } else {
  87                                         $text = $wgParser->getSection( $text, $section );
  88                                 }
  89                         }
  90                 }
  91
  92                 wfProfileOut( __METHOD__ );
  93                 return $text;
  94         }
  95
  96         /**
  97          * Get the contents of a page from its title and remove includeonly tags
  98          *
  99          * @param $preload String: the title of the page.
 100          * @return string The contents of the page.
 101          */
 102         private function getPreloadedText($preload) {
 103                 if ( $preload === '' )
 104                         return '';
 105                 else {
 106                         $preloadTitle = Title::newFromText( $preload );
 107                         if ( isset( $preloadTitle ) && $preloadTitle->userCanRead() ) {
 108                                 $rev=Revision::newFromTitle($preloadTitle);
 109                                 if ( is_object( $rev ) ) {
 110                                         $text = $rev->getText();
 111                                         // TODO FIXME: AAAAAAAAAAA, this shouldn't be implementing
 112                                         // its own mini-parser! -ævar
 113                                         $text = preg_replace( '~</?includeonly>~', '', $text );
 114                                         return $text;
 115                                 } else
 116                                         return '';
 117                         }
 118                 }
 119         }
 120
 121         /**
 122          * This is the function that extracts metadata from the article body on the first view.
 123          * To turn the feature on, set $wgUseMetadataEdit = true ; in LocalSettings
 124          *  and set $wgMetadataWhitelist to the *full* title of the template whitelist
 125          */
 126         function extractMetaDataFromArticle () {
 127                 global $wgUseMetadataEdit , $wgMetadataWhitelist , $wgLang ;
 128                 $this->mMetaData = '' ;
 129                 if ( !$wgUseMetadataEdit ) return ;
 130                 if ( $wgMetadataWhitelist == '' ) return ;
 131                 $s = '' ;
 132                 $t = $this->getContent();
 133
 134                 # MISSING : <nowiki> filtering
 135
 136                 # Categories and language links
 137                 $t = explode ( "\n" , $t ) ;
 138                 $catlow = strtolower ( $wgLang->getNsText ( NS_CATEGORY ) ) ;
 139                 $cat = $ll = array() ;
 140                 foreach ( $t AS $key => $x )
 141                 {
 142                         $y = trim ( strtolower ( $x ) ) ;
 143                         while ( substr ( $y , 0 , 2 ) == '[[' )
 144                         {
 145                                 $y = explode ( ']]' , trim ( $x ) ) ;
 146                                 $first = array_shift ( $y ) ;
 147                                 $first = explode ( ':' , $first ) ;
 148                                 $ns = array_shift ( $first ) ;
 149                                 $ns = trim ( str_replace ( '[' , '' , $ns ) ) ;
 150                                 if ( strlen ( $ns ) == 2 OR strtolower ( $ns ) == $catlow )
 151                                 {
 152                                         $add = '[[' . $ns . ':' . implode ( ':' , $first ) . ']]' ;
 153                                         if ( strtolower ( $ns ) == $catlow ) $cat[] = $add ;
 154                                         else $ll[] = $add ;
 155                                         $x = implode ( ']]' , $y ) ;
 156                                         $t[$key] = $x ;
 157                                         $y = trim ( strtolower ( $x ) ) ;
 158                                 }
 159                         }
 160                 }
 161                 if ( count ( $cat ) ) $s .= implode ( ' ' , $cat ) . "\n" ;
 162                 if ( count ( $ll ) ) $s .= implode ( ' ' , $ll ) . "\n" ;
 163                 $t = implode ( "\n" , $t ) ;
 164
 165                 # Load whitelist
 166                 $sat = array () ; # stand-alone-templates; must be lowercase
 167                 $wl_title = Title::newFromText ( $wgMetadataWhitelist ) ;
 168                 $wl_article = new Article ( $wl_title ) ;
 169                 $wl = explode ( "\n" , $wl_article->getContent() ) ;
 170                 foreach ( $wl AS $x )
 171                 {
 172                         $isentry = false ;
 173                         $x = trim ( $x ) ;
 174                         while ( substr ( $x , 0 , 1 ) == '*' )
 175                         {
 176                                 $isentry = true ;
 177                                 $x = trim ( substr ( $x , 1 ) ) ;
 178                         }
 179                         if ( $isentry )
 180                         {
 181                                 $sat[] = strtolower ( $x ) ;
 182                         }
 183
 184                 }
 185
 186                 # Templates, but only some
 187                 $t = explode ( '{{' , $t ) ;
 188                 $tl = array () ;
 189                 foreach ( $t AS $key => $x )
 190                 {
 191                         $y = explode ( '}}' , $x , 2 ) ;
 192                         if ( count ( $y ) == 2 )
 193                         {
 194                                 $z = $y[0] ;
 195                                 $z = explode ( '|' , $z ) ;
 196                                 $tn = array_shift ( $z ) ;
 197                                 if ( in_array ( strtolower ( $tn ) , $sat ) )
 198                                 {
 199                                         $tl[] = '{{' . $y[0] . '}}' ;
 200                                         $t[$key] = $y[1] ;
 201                                         $y = explode ( '}}' , $y[1] , 2 ) ;
 202                                 }
 203                                 else $t[$key] = '{{' . $x ;
 204                         }
 205                         else if ( $key != 0 ) $t[$key] = '{{' . $x ;
 206                         else $t[$key] = $x ;
 207                 }
 208                 if ( count ( $tl ) ) $s .= implode ( ' ' , $tl ) ;
 209                 $t = implode ( '' , $t ) ;
 210
 211                 $t = str_replace ( "\n\n\n" , "\n" , $t ) ;
 212                 $this->mArticle->mContent = $t ;
 213                 $this->mMetaData = $s ;
 214         }
 215
 216         function submit() {
 217                 $this->edit();
 218         }
 219
 220         /**
 221          * This is the function that gets called for "action=edit". It
 222          * sets up various member variables, then passes execution to
 223          * another function, usually showEditForm()
 224          *
 225          * The edit form is self-submitting, so that when things like
 226          * preview and edit conflicts occur, we get the same form back
 227          * with the extra stuff added.  Only when the final submission
 228          * is made and all is well do we actually save and redirect to
 229          * the newly-edited page.
 230          */
 231         function edit() {
 232                 global $wgOut, $wgUser, $wgRequest, $wgTitle;
 233                 global $wgEmailConfirmToEdit;
 234
 235                 if ( ! wfRunHooks( 'AlternateEdit', array( &$this  ) ) )
 236                         return;
 237
 238                 $fname = 'EditPage::edit';
 239                 wfProfileIn( $fname );
 240                 wfDebug( "$fname: enter\n" );
 241
 242                 // this is not an article
 243                 $wgOut->setArticleFlag(false);
 244
 245                 $this->importFormData( $wgRequest );
 246                 $this->firsttime = false;
 247
 248                 if( $this->live ) {
 249                         $this->livePreview();
 250                         wfProfileOut( $fname );
 251                         return;
 252                 }
 253
 254                 if ( ! $this->mTitle->userCanEdit() ) {
 255                         wfDebug( "$fname: user can't edit\n" );
 256                         $wgOut->readOnlyPage( $this->getContent(), true );
 257                         wfProfileOut( $fname );
 258                         return;
 259                 }
 260                 wfDebug( "$fname: Checking blocks\n" );
 261                 if ( !$this->preview && !$this->diff && $wgUser->isBlockedFrom( $this->mTitle, !$this->save ) ) {
 262                         # When previewing, don't check blocked state - will get caught at save time.
 263                         # Also, check when starting edition is done against slave to improve performance.
 264                         wfDebug( "$fname: user is blocked\n" );
 265                         $this->blockedPage();
 266                         wfProfileOut( $fname );
 267                         return;
 268                 }
 269                 if ( !$wgUser->isAllowed('edit') ) {
 270                         if ( $wgUser->isAnon() ) {
 271                                 wfDebug( "$fname: user must log in\n" );
 272                                 $this->userNotLoggedInPage();
 273                                 wfProfileOut( $fname );
 274                                 return;
 275                         } else {
 276                                 wfDebug( "$fname: read-only page\n" );
 277                                 $wgOut->readOnlyPage( $this->getContent(), true );
 278                                 wfProfileOut( $fname );
 279                                 return;
 280                         }
 281                 }
 282                 if ($wgEmailConfirmToEdit && !$wgUser->isEmailConfirmed()) {
 283                         wfDebug("$fname: user must confirm e-mail address\n");
 284                         $this->userNotConfirmedPage();
 285                         wfProfileOut($fname);
 286                         return;
 287                 }
 288                 if ( !$this->mTitle->userCanCreate() && !$this->mTitle->exists() ) {
 289                         wfDebug( "$fname: no create permission\n" );
 290                         $this->noCreatePermission();
 291                         wfProfileOut( $fname );
 292                         return;
 293                 }
 294                 if ( wfReadOnly() ) {
 295                         wfDebug( "$fname: read-only mode is engaged\n" );
 296                         if( $this->save || $this->preview ) {
 297                                 $this->formtype = 'preview';
 298                         } else if ( $this->diff ) {
 299                                 $this->formtype = 'diff';
 300                         } else {
 301                                 $wgOut->readOnlyPage( $this->getContent() );
 302                                 wfProfileOut( $fname );
 303                                 return;
 304                         }
 305                 } else {
 306                         if ( $this->save ) {
 307                                 $this->formtype = 'save';
 308                         } else if ( $this->preview ) {
 309                                 $this->formtype = 'preview';
 310                         } else if ( $this->diff ) {
 311                                 $this->formtype = 'diff';
 312                         } else { # First time through
 313                                 $this->firsttime = true;
 314                                 if( $this->previewOnOpen() ) {
 315                                         $this->formtype = 'preview';
 316                                 } else {
 317                                         $this->extractMetaDataFromArticle () ;
 318                                         $this->formtype = 'initial';
 319                                 }
 320                         }
 321                 }
 322
 323                 wfProfileIn( "$fname-business-end" );
 324
 325                 $this->isConflict = false;
 326                 // css / js subpages of user pages get a special treatment
 327                 $this->isCssJsSubpage      = $wgTitle->isCssJsSubpage();
 328                 $this->isValidCssJsSubpage = $wgTitle->isValidCssJsSubpage();
 329
 330                 /* Notice that we can't use isDeleted, because it returns true if article is ever deleted
 331                  * no matter it's current state
 332                  */
 333                 $this->deletedSinceEdit = false;
 334                 if ( $this->edittime != '' ) {
 335                         /* Note that we rely on logging table, which hasn't been always there,
 336                          * but that doesn't matter, because this only applies to brand new
 337                          * deletes. This is done on every preview and save request. Move it further down
 338                          * to only perform it on saves
 339                          */
 340                         if ( $this->mTitle->isDeleted() ) {
 341                                 $this->lastDelete = $this->getLastDelete();
 342                                 if ( !is_null($this->lastDelete) ) {
 343                                         $deletetime = $this->lastDelete->log_timestamp;
 344                                         if ( ($deletetime - $this->starttime) > 0 ) {
 345                                                 $this->deletedSinceEdit = true;
 346                                         }
 347                                 }
 348                         }
 349                 }
 350
 351                 if(!$this->mTitle->getArticleID() && ('initial' == $this->formtype || $this->firsttime )) { # new article
 352                         $this->showIntro();
 353                 }
 354                 if( $this->mTitle->isTalkPage() ) {
 355                         $wgOut->addWikiText( wfMsg( 'talkpagetext' ) );
 356                 }
 357
 358                 # Attempt submission here.  This will check for edit conflicts,
 359                 # and redundantly check for locked database, blocked IPs, etc.
 360                 # that edit() already checked just in case someone tries to sneak
 361                 # in the back door with a hand-edited submission URL.
 362
 363                 if ( 'save' == $this->formtype ) {
 364                         if ( !$this->attemptSave() ) {
 365                                 wfProfileOut( "$fname-business-end" );
 366                                 wfProfileOut( $fname );
 367                                 return;
 368                         }
 369                 }
 370
 371                 # First time through: get contents, set time for conflict
 372                 # checking, etc.
 373                 if ( 'initial' == $this->formtype || $this->firsttime ) {
 374                         $this->initialiseForm();
 375                         if( !$this->mTitle->getArticleId() )
 376                                 wfRunHooks( 'EditFormPreloadText', array( &$this->textbox1, &$this->mTitle ) );
 377                 }
 378
 379                 $this->showEditForm();
 380                 wfProfileOut( "$fname-business-end" );
 381                 wfProfileOut( $fname );
 382         }
 383
 384         /**
 385          * Return true if this page should be previewed when the edit form
 386          * is initially opened.
 387          * @return bool
 388          * @private
 389          */
 390         function previewOnOpen() {
 391                 global $wgUser;
 392                 return $this->section != 'new' &&
 393                         ( ( $wgUser->getOption( 'previewonfirst' ) && $this->mTitle->exists() ) ||
 394                                 ( $this->mTitle->getNamespace() == NS_CATEGORY &&
 395                                         !$this->mTitle->exists() ) );
 396         }
 397
 398         /**
 399          * @todo document
 400          * @param $request
 401          */
 402         function importFormData( &$request ) {
 403                 global $wgLang, $wgUser;
 404                 $fname = 'EditPage::importFormData';
 405                 wfProfileIn( $fname );
 406
 407                 if( $request->wasPosted() ) {
 408                         # These fields need to be checked for encoding.
 409                         # Also remove trailing whitespace, but don't remove _initial_
 410                         # whitespace from the text boxes. This may be significant formatting.
 411                         $this->textbox1 = $this->safeUnicodeInput( $request, 'wpTextbox1' );
 412                         $this->textbox2 = $this->safeUnicodeInput( $request, 'wpTextbox2' );
 413                         $this->mMetaData = rtrim( $request->getText( 'metadata'   ) );
 414                         # Truncate for whole multibyte characters. +5 bytes for ellipsis
 415                         $this->summary   = $wgLang->truncate( $request->getText( 'wpSummary'  ), 250 );
 416
 417                         $this->edittime = $request->getVal( 'wpEdittime' );
 418                         $this->starttime = $request->getVal( 'wpStarttime' );
 419
 420                         $this->scrolltop = $request->getIntOrNull( 'wpScrolltop' );
 421
 422                         if( is_null( $this->edittime ) ) {
 423                                 # If the form is incomplete, force to preview.
 424                                 wfDebug( "$fname: Form data appears to be incomplete\n" );
 425                                 wfDebug( "POST DATA: " . var_export( $_POST, true ) . "\n" );
 426                                 $this->preview  = true;
 427                         } else {
 428                                 /* Fallback for live preview */
 429                                 $this->preview = $request->getCheck( 'wpPreview' ) || $request->getCheck( 'wpLivePreview' );
 430                                 $this->diff = $request->getCheck( 'wpDiff' );
 431
 432                                 // Remember whether a save was requested, so we can indicate
 433                                 // if we forced preview due to session failure.
 434                                 $this->mTriedSave = !$this->preview;
 435
 436                                 if ( $this->tokenOk( $request ) ) {
 437                                         # Some browsers will not report any submit button
 438                                         # if the user hits enter in the comment box.
 439                                         # The unmarked state will be assumed to be a save,
 440                                         # if the form seems otherwise complete.
 441                                         wfDebug( "$fname: Passed token check.\n" );
 442                                 } else if ( $this->diff ) {
 443                                         # Failed token check, but only requested "Show Changes".
 444                                         wfDebug( "$fname: Failed token check; Show Changes requested.\n" );
 445                                 } else {
 446                                         # Page might be a hack attempt posted from
 447                                         # an external site. Preview instead of saving.
 448                                         wfDebug( "$fname: Failed token check; forcing preview\n" );
 449                                         $this->preview = true;
 450                                 }
 451                         }
 452                         $this->save    = ! ( $this->preview OR $this->diff );
 453                         if( !preg_match( '/^\d{14}$/', $this->edittime )) {
 454                                 $this->edittime = null;
 455                         }
 456
 457                         if( !preg_match( '/^\d{14}$/', $this->starttime )) {
 458                                 $this->starttime = null;
 459                         }
 460
 461                         $this->recreate  = $request->getCheck( 'wpRecreate' );
 462
 463                         $this->minoredit = $request->getCheck( 'wpMinoredit' );
 464                         $this->watchthis = $request->getCheck( 'wpWatchthis' );
 465
 466                         # Don't force edit summaries when a user is editing their own user or talk page
 467                         if( ( $this->mTitle->mNamespace == NS_USER || $this->mTitle->mNamespace == NS_USER_TALK ) && $this->mTitle->getText() == $wgUser->getName() ) {
 468                                 $this->allowBlankSummary = true;
 469                         } else {
 470                                 $this->allowBlankSummary = $request->getBool( 'wpIgnoreBlankSummary' );
 471                         }
 472
 473                         $this->autoSumm = $request->getText( 'wpAutoSummary' );
 474                 } else {
 475                         # Not a posted form? Start with nothing.
 476                         wfDebug( "$fname: Not a posted form.\n" );
 477                         $this->textbox1  = '';
 478                         $this->textbox2  = '';
 479                         $this->mMetaData = '';
 480                         $this->summary   = '';
 481                         $this->edittime  = '';
 482                         $this->starttime = wfTimestampNow();
 483                         $this->preview   = false;
 484                         $this->save      = false;
 485                         $this->diff      = false;
 486                         $this->minoredit = false;
 487                         $this->watchthis = false;
 488                         $this->recreate  = false;
 489                 }
 490
 491                 $this->oldid = $request->getInt( 'oldid' );
 492
 493                 # Section edit can come from either the form or a link
 494                 $this->section = $request->getVal( 'wpSection', $request->getVal( 'section' ) );
 495
 496                 $this->live = $request->getCheck( 'live' );
 497                 $this->editintro = $request->getText( 'editintro' );
 498
 499                 wfProfileOut( $fname );
 500         }
 501
 502         /**
 503          * Make sure the form isn't faking a user's credentials.
 504          *
 505          * @param $request WebRequest
 506          * @return bool
 507          * @private
 508          */
 509         function tokenOk( &$request ) {
 510                 global $wgUser;
 511                 if( $wgUser->isAnon() ) {
 512                         # Anonymous users may not have a session
 513                         # open. Don't tokenize.
 514                         $this->mTokenOk = true;
 515                 } else {
 516                         $this->mTokenOk = $wgUser->matchEditToken( $request->getVal( 'wpEditToken' ) );
 517                 }
 518                 return $this->mTokenOk;
 519         }
 520
 521         /** */
 522         function showIntro() {
 523                 global $wgOut, $wgUser;
 524                 $addstandardintro=true;
 525                 if($this->editintro) {
 526                         $introtitle=Title::newFromText($this->editintro);
 527                         if(isset($introtitle) && $introtitle->userCanRead()) {
 528                                 $rev=Revision::newFromTitle($introtitle);
 529                                 if($rev) {
 530                                         $wgOut->addSecondaryWikiText($rev->getText());
 531                                         $addstandardintro=false;
 532                                 }
 533                         }
 534                 }
 535                 if($addstandardintro) {
 536                         if ( $wgUser->isLoggedIn() )
 537                                 $wgOut->addWikiText( wfMsg( 'newarticletext' ) );
 538                         else
 539                                 $wgOut->addWikiText( wfMsg( 'newarticletextanon' ) );
 540                 }
 541         }
 542
 543         /**
 544          * Attempt submission
 545          * @return bool false if output is done, true if the rest of the form should be displayed
 546          */
 547         function attemptSave() {
 548                 global $wgSpamRegex, $wgFilterCallback, $wgUser, $wgOut;
 549                 global $wgMaxArticleSize;
 550
 551                 $fname = 'EditPage::attemptSave';
 552                 wfProfileIn( $fname );
 553                 wfProfileIn( "$fname-checks" );
 554
 555                 # Reintegrate metadata
 556                 if ( $this->mMetaData != '' ) $this->textbox1 .= "\n" . $this->mMetaData ;
 557                 $this->mMetaData = '' ;
 558
 559                 # Check for spam
 560                 if ( $wgSpamRegex && preg_match( $wgSpamRegex, $this->textbox1, $matches ) ) {
 561                         $this->spamPage ( $matches[0] );
 562                         wfProfileOut( "$fname-checks" );
 563                         wfProfileOut( $fname );
 564                         return false;
 565                 }
 566                 if ( $wgFilterCallback && $wgFilterCallback( $this->mTitle, $this->textbox1, $this->section ) ) {
 567                         # Error messages or other handling should be performed by the filter function
 568                         wfProfileOut( $fname );
 569                         wfProfileOut( "$fname-checks" );
 570                         return false;
 571                 }
 572                 if ( !wfRunHooks( 'EditFilter', array( $this, $this->textbox1, $this->section, &$this->hookError ) ) ) {
 573                         # Error messages etc. could be handled within the hook...
 574                         wfProfileOut( $fname );
 575                         wfProfileOut( "$fname-checks" );
 576                         return false;
 577                 } elseif( $this->hookError != '' ) {
 578                         # ...or the hook could be expecting us to produce an error
 579                         wfProfileOut( "$fname-checks " );
 580                         wfProfileOut( $fname );
 581                         return true;
 582                 }
 583                 if ( $wgUser->isBlockedFrom( $this->mTitle, false ) ) {
 584                         # Check block state against master, thus 'false'.
 585                         $this->blockedPage();
 586                         wfProfileOut( "$fname-checks" );
 587                         wfProfileOut( $fname );
 588                         return false;
 589                 }
 590                 $this->kblength = (int)(strlen( $this->textbox1 ) / 1024);
 591                 if ( $this->kblength > $wgMaxArticleSize ) {
 592                         // Error will be displayed by showEditForm()
 593                         $this->tooBig = true;
 594                         wfProfileOut( "$fname-checks" );
 595                         wfProfileOut( $fname );
 596                         return true;
 597                 }
 598
 599                 if ( !$wgUser->isAllowed('edit') ) {
 600                         if ( $wgUser->isAnon() ) {
 601                                 $this->userNotLoggedInPage();
 602                                 wfProfileOut( "$fname-checks" );
 603                                 wfProfileOut( $fname );
 604                                 return false;
 605                         }
 606                         else {
 607                                 $wgOut->readOnlyPage();
 608                                 wfProfileOut( "$fname-checks" );
 609                                 wfProfileOut( $fname );
 610                                 return false;
 611                         }
 612                 }
 613
 614                 if ( wfReadOnly() ) {
 615                         $wgOut->readOnlyPage();
 616                         wfProfileOut( "$fname-checks" );
 617                         wfProfileOut( $fname );
 618                         return false;
 619                 }
 620                 if ( $wgUser->pingLimiter() ) {
 621                         $wgOut->rateLimited();
 622                         wfProfileOut( "$fname-checks" );
 623                         wfProfileOut( $fname );
 624                         return false;
 625                 }
 626
 627                 # If the article has been deleted while editing, don't save it without
 628                 # confirmation
 629                 if ( $this->deletedSinceEdit && !$this->recreate ) {
 630                         wfProfileOut( "$fname-checks" );
 631                         wfProfileOut( $fname );
 632                         return true;
 633                 }
 634
 635                 wfProfileOut( "$fname-checks" );
 636
 637                 # If article is new, insert it.
 638                 $aid = $this->mTitle->getArticleID( GAID_FOR_UPDATE );
 639                 if ( 0 == $aid ) {
 640                         // Late check for create permission, just in case *PARANOIA*
 641                         if ( !$this->mTitle->userCanCreate() ) {
 642                                 wfDebug( "$fname: no create permission\n" );
 643                                 $this->noCreatePermission();
 644                                 wfProfileOut( $fname );
 645                                 return;
 646                         }
 647
 648                         # Don't save a new article if it's blank.
 649                         if ( ( '' == $this->textbox1 ) ) {
 650                                         $wgOut->redirect( $this->mTitle->getFullURL() );
 651                                         wfProfileOut( $fname );
 652                                         return false;
 653                         }
 654
 655                         # If no edit comment was given when creating a new page, and what's being
 656                         # created is a redirect, be smart and fill in a neat auto-comment
 657                         if( $this->summary == '' ) {
 658                                 $rt = Title::newFromRedirect( $this->textbox1 );
 659                                 if( is_object( $rt ) )
 660                                         $this->summary = wfMsgForContent( 'autoredircomment', $rt->getPrefixedText() );
 661                         }
 662
 663                         $isComment=($this->section=='new');
 664                         $this->mArticle->insertNewArticle( $this->textbox1, $this->summary,
 665                                 $this->minoredit, $this->watchthis, false, $isComment);
 666
 667                         wfProfileOut( $fname );
 668                         return false;
 669                 }
 670
 671                 # Article exists. Check for edit conflict.
 672
 673                 $this->mArticle->clear(); # Force reload of dates, etc.
 674                 $this->mArticle->forUpdate( true ); # Lock the article
 675
 676                 if( $this->mArticle->getTimestamp() != $this->edittime ) {
 677                         $this->isConflict = true;
 678                         if( $this->section == 'new' ) {
 679                                 if( $this->mArticle->getUserText() == $wgUser->getName() &&
 680                                         $this->mArticle->getComment() == $this->summary ) {
 681                                         // Probably a duplicate submission of a new comment.
 682                                         // This can happen when squid resends a request after
 683                                         // a timeout but the first one actually went through.
 684                                         wfDebug( "EditPage::editForm duplicate new section submission; trigger edit conflict!\n" );
 685                                 } else {
 686                                         // New comment; suppress conflict.
 687                                         $this->isConflict = false;
 688                                         wfDebug( "EditPage::editForm conflict suppressed; new section\n" );
 689                                 }
 690                         }
 691                 }
 692                 $userid = $wgUser->getID();
 693
 694                 if ( $this->isConflict) {
 695                         wfDebug( "EditPage::editForm conflict! getting section '$this->section' for time '$this->edittime' (article time '" .
 696                                 $this->mArticle->getTimestamp() . "'\n" );
 697                         $text = $this->mArticle->replaceSection( $this->section, $this->textbox1, $this->summary, $this->edittime);
 698                 }
 699                 else {
 700                         wfDebug( "EditPage::editForm getting section '$this->section'\n" );
 701                         $text = $this->mArticle->replaceSection( $this->section, $this->textbox1, $this->summary);
 702                 }
 703                 if( is_null( $text ) ) {
 704                         wfDebug( "EditPage::editForm activating conflict; section replace failed.\n" );
 705                         $this->isConflict = true;
 706                         $text = $this->textbox1;
 707                 }
 708
 709                 # Suppress edit conflict with self, except for section edits where merging is required.
 710                 if ( ( $this->section == '' ) && ( 0 != $userid ) && ( $this->mArticle->getUser() == $userid ) ) {
 711                         wfDebug( "Suppressing edit conflict, same user.\n" );
 712                         $this->isConflict = false;
 713                 } else {
 714                         # switch from section editing to normal editing in edit conflict
 715                         if($this->isConflict) {
 716                                 # Attempt merge
 717                                 if( $this->mergeChangesInto( $text ) ){
 718                                         // Successful merge! Maybe we should tell the user the good news?
 719                                         $this->isConflict = false;
 720                                         wfDebug( "Suppressing edit conflict, successful merge.\n" );
 721                                 } else {
 722                                         $this->section = '';
 723                                         $this->textbox1 = $text;
 724                                         wfDebug( "Keeping edit conflict, failed merge.\n" );
 725                                 }
 726                         }
 727                 }
 728
 729                 if ( $this->isConflict ) {
 730                         wfProfileOut( $fname );
 731                         return true;
 732                 }
 733
 734                 # If no edit comment was given when turning a page into a redirect, be smart
 735                 # and fill in a neat auto-comment
 736                 if( $this->summary == '' ) {
 737                         $rt = Title::newFromRedirect( $this->textbox1 );
 738                         if( is_object( $rt ) )
 739                                 $this->summary = wfMsgForContent( 'autoredircomment', $rt->getPrefixedText() );
 740                 }
 741
 742                 # Handle the user preference to force summaries here
 743                 if( $this->section != 'new' && !$this->allowBlankSummary && $wgUser->getOption( 'forceeditsummary' ) ) {
 744                         if( md5( $this->summary ) == $this->autoSumm ) {
 745                                 $this->missingSummary = true;
 746                                 wfProfileOut( $fname );
 747                                 return( true );
 748                         }
 749                 }
 750
 751                 # All's well
 752                 wfProfileIn( "$fname-sectionanchor" );
 753                 $sectionanchor = '';
 754                 if( $this->section == 'new' ) {
 755                         if ( $this->textbox1 == '' ) {
 756                                 $this->missingComment = true;
 757                                 return true;
 758                         }
 759                         if( $this->summary != '' ) {
 760                                 $sectionanchor = $this->sectionAnchor( $this->summary );
 761                         }
 762                 } elseif( $this->section != '' ) {
 763                         # Try to get a section anchor from the section source, redirect to edited section if header found
 764                         # XXX: might be better to integrate this into Article::replaceSection
 765                         # for duplicate heading checking and maybe parsing
 766                         $hasmatch = preg_match( "/^ *([=]{1,6})(.*?)(\\1) *\\n/i", $this->textbox1, $matches );
 767                         # we can't deal with anchors, includes, html etc in the header for now,
 768                         # headline would need to be parsed to improve this
 769                         if($hasmatch and strlen($matches[2]) > 0) {
 770                                 $sectionanchor = $this->sectionAnchor( $matches[2] );
 771                         }
 772                 }
 773                 wfProfileOut( "$fname-sectionanchor" );
 774
 775                 // Save errors may fall down to the edit form, but we've now
 776                 // merged the section into full text. Clear the section field
 777                 // so that later submission of conflict forms won't try to
 778                 // replace that into a duplicated mess.
 779                 $this->textbox1 = $text;
 780                 $this->section = '';
 781
 782                 // Check for length errors again now that the section is merged in
 783                 $this->kblength = (int)(strlen( $text ) / 1024);
 784                 if ( $this->kblength > $wgMaxArticleSize ) {
 785                         $this->tooBig = true;
 786                         wfProfileOut( $fname );
 787                         return true;
 788                 }
 789
 790                 # update the article here
 791                 if( $this->mArticle->updateArticle( $text, $this->summary, $this->minoredit,
 792                         $this->watchthis, '', $sectionanchor ) ) {
 793                         wfProfileOut( $fname );
 794                         return false;
 795                 } else {
 796                         $this->isConflict = true;
 797                 }
 798                 wfProfileOut( $fname );
 799                 return true;
 800         }
 801
 802         /**
 803          * Initialise form fields in the object
 804          * Called on the first invocation, e.g. when a user clicks an edit link
 805          */
 806         function initialiseForm() {
 807                 $this->edittime = $this->mArticle->getTimestamp();
 808                 $this->textbox1 = $this->getContent();
 809                 $this->summary = '';
 810                 if ( !$this->mArticle->exists() && $this->mArticle->mTitle->getNamespace() == NS_MEDIAWIKI )
 811                         $this->textbox1 = wfMsgWeirdKey( $this->mArticle->mTitle->getText() ) ;
 812                 wfProxyCheck();
 813         }
 814
 815         /**
 816          * Send the edit form and related headers to $wgOut
 817          * @param $formCallback Optional callable that takes an OutputPage
 818          *                      parameter; will be called during form output
 819          *                      near the top, for captchas and the like.
 820          */
 821         function showEditForm( $formCallback=null ) {
 822                 global $wgOut, $wgUser, $wgLang, $wgContLang, $wgMaxArticleSize;
 823
 824                 $fname = 'EditPage::showEditForm';
 825                 wfProfileIn( $fname );
 826
 827                 $sk =& $wgUser->getSkin();
 828
 829                 wfRunHooks( 'EditPage::showEditForm:initial', array( &$this ) ) ;
 830
 831                 $wgOut->setRobotpolicy( 'noindex,nofollow' );
 832
 833                 # Enabled article-related sidebar, toplinks, etc.
 834                 $wgOut->setArticleRelated( true );
 835
 836                 if ( $this->isConflict ) {
 837                         $s = wfMsg( 'editconflict', $this->mTitle->getPrefixedText() );
 838                         $wgOut->setPageTitle( $s );
 839                         $wgOut->addWikiText( wfMsg( 'explainconflict' ) );
 840
 841                         $this->textbox2 = $this->textbox1;
 842                         $this->textbox1 = $this->getContent();
 843                         $this->edittime = $this->mArticle->getTimestamp();
 844                 } else {
 845
 846                         if( $this->section != '' ) {
 847                                 if( $this->section == 'new' ) {
 848                                         $s = wfMsg('editingcomment', $this->mTitle->getPrefixedText() );
 849                                 } else {
 850                                         $s = wfMsg('editingsection', $this->mTitle->getPrefixedText() );
 851                                         if( !$this->summary && !$this->preview && !$this->diff ) {
 852                                                 preg_match( "/^(=+)(.+)\\1/mi",
 853                                                         $this->textbox1,
 854                                                         $matches );
 855                                                 if( !empty( $matches[2] ) ) {
 856                                                         $this->summary = "/* ". trim($matches[2])." */ ";
 857                                                 }
 858                                         }
 859                                 }
 860                         } else {
 861                                 $s = wfMsg( 'editing', $this->mTitle->getPrefixedText() );
 862                         }
 863                         $wgOut->setPageTitle( $s );
 864
 865                         if ( $this->missingComment ) {
 866                                 $wgOut->addWikiText( wfMsg( 'missingcommenttext' ) );
 867                         }
 868
 869                         if( $this->missingSummary ) {
 870                                 $wgOut->addWikiText( wfMsg( 'missingsummary' ) );
 871                         }
 872
 873                         if( !$this->hookError == '' ) {
 874                                 $wgOut->addWikiText( $this->hookError );
 875                         }
 876
 877                         if ( !$this->checkUnicodeCompliantBrowser() ) {
 878                                 $wgOut->addWikiText( wfMsg( 'nonunicodebrowser') );
 879                         }
 880                         if ( isset( $this->mArticle )
 881                              && isset( $this->mArticle->mRevision )
 882                              && !$this->mArticle->mRevision->isCurrent() ) {
 883                                 $this->mArticle->setOldSubtitle( $this->mArticle->mRevision->getId() );
 884                                 $wgOut->addWikiText( wfMsg( 'editingold' ) );
 885                         }
 886                 }
 887
 888                 if( wfReadOnly() ) {
 889                         $wgOut->addWikiText( wfMsg( 'readonlywarning' ) );
 890                 } elseif( $wgUser->isAnon() && $this->formtype != 'preview' ) {
 891                         $wgOut->addWikiText( wfMsg( 'anoneditwarning' ) );
 892                 } else {
 893                         if( $this->isCssJsSubpage && $this->formtype != 'preview' ) {
 894                                 # Check the skin exists
 895                                 if( $this->isValidCssJsSubpage ) {
 896                                         $wgOut->addWikiText( wfMsg( 'usercssjsyoucanpreview' ) );
 897                                 } else {
 898                                         $wgOut->addWikiText( wfMsg( 'userinvalidcssjstitle', $this->mTitle->getSkinFromCssJsSubpage() ) );
 899                                 }
 900                         }
 901                 }
 902
 903                 if( $this->mTitle->isProtected( 'edit' ) ) {
 904                         # Is the protection due to the namespace, e.g. interface text?
 905                         if( $this->mTitle->getNamespace() == NS_MEDIAWIKI ) {
 906                                 # Yes; remind the user
 907                                 $notice = wfMsg( 'editinginterface' );
 908                         } elseif( $this->mTitle->isSemiProtected() ) {
 909                                 # No; semi protected
 910                                 $notice = wfMsg( 'semiprotectedpagewarning' );
 911                                 if( wfEmptyMsg( 'semiprotectedpagewarning', $notice ) || $notice == '-' ) {
 912                                         $notice = '';
 913                                 }
 914                         } else {
 915                                 # No; regular protection
 916                                 $notice = wfMsg( 'protectedpagewarning' );
 917                         }
 918                         $wgOut->addWikiText( $notice );
 919                 }
 920
 921                 if ( $this->kblength === false ) {
 922                         $this->kblength = (int)(strlen( $this->textbox1 ) / 1024);
 923                 }
 924                 if ( $this->tooBig || $this->kblength > $wgMaxArticleSize ) {
 925                         $wgOut->addWikiText( wfMsg( 'longpageerror', $wgLang->formatNum( $this->kblength ), $wgMaxArticleSize ) );
 926                 } elseif( $this->kblength > 29 ) {
 927                         $wgOut->addWikiText( wfMsg( 'longpagewarning', $wgLang->formatNum( $this->kblength ) ) );
 928                 }
 929
 930                 $rows = $wgUser->getIntOption( 'rows' );
 931                 $cols = $wgUser->getIntOption( 'cols' );
 932
 933                 $ew = $wgUser->getOption( 'editwidth' );
 934                 if ( $ew ) $ew = " style=\"width:100%\"";
 935                 else $ew = '';
 936
 937                 $q = 'action=submit';
 938                 #if ( "no" == $redirect ) { $q .= "&redirect=no"; }
 939                 $action = $this->mTitle->escapeLocalURL( $q );
 940
 941                 $summary = wfMsg('summary');
 942                 $subject = wfMsg('subject');
 943                 $minor   = wfMsgExt('minoredit', array('parseinline'));
 944                 $watchthis = wfMsgExt('watchthis', array('parseinline'));
 945
 946                 $cancel = $sk->makeKnownLink( $this->mTitle->getPrefixedText(),
 947                                 wfMsgExt('cancel', array('parseinline')) );
 948                 $edithelpurl = Skin::makeInternalOrExternalUrl( wfMsgForContent( 'edithelppage' ));
 949                 $edithelp = '<a target="helpwindow" href="'.$edithelpurl.'">'.
 950                         htmlspecialchars( wfMsg( 'edithelp' ) ).'</a> '.
 951                         htmlspecialchars( wfMsg( 'newwindow' ) );
 952
 953                 global $wgRightsText;
 954                 $copywarn = "<div id=\"editpage-copywarn\">\n" .
 955                         wfMsg( $wgRightsText ? 'copyrightwarning' : 'copyrightwarning2',
 956                                 '[[' . wfMsgForContent( 'copyrightpage' ) . ']]',
 957                                 $wgRightsText ) . "\n</div>";
 958
 959                 if( $wgUser->getOption('showtoolbar') and !$this->isCssJsSubpage ) {
 960                         # prepare toolbar for edit buttons
 961                         $toolbar = $this->getEditToolbar();
 962                 } else {
 963                         $toolbar = '';
 964                 }
 965
 966                 // activate checkboxes if user wants them to be always active
 967                 if( !$this->preview && !$this->diff ) {
 968                         # Sort out the "watch" checkbox
 969                         if( $wgUser->getOption( 'watchdefault' ) ) {
 970                                 # Watch all edits
 971                                 $this->watchthis = true;
 972                         } elseif( $wgUser->getOption( 'watchcreations' ) && !$this->mTitle->exists() ) {
 973                                 # Watch creations
 974                                 $this->watchthis = true;
 975                         } elseif( $this->mTitle->userIsWatching() ) {
 976                                 # Already watched
 977                                 $this->watchthis = true;
 978                         }
 979
 980                         if( $wgUser->getOption( 'minordefault' ) ) $this->minoredit = true;
 981                 }
 982
 983                 $minoredithtml = '';
 984
 985                 if ( $wgUser->isAllowed('minoredit') ) {
 986                         $minoredithtml =
 987                                 "<input tabindex='3' type='checkbox' value='1' name='wpMinoredit'".($this->minoredit?" checked='checked'":"").
 988                                 " accesskey='".wfMsg('accesskey-minoredit')."' id='wpMinoredit' />\n".
 989                                 "<label for='wpMinoredit'".Skin::tooltipAndAccesskey('minoredit').">{$minor}</label>\n";
 990                 }
 991
 992                 $watchhtml = '';
 993
 994                 if ( $wgUser->isLoggedIn() ) {
 995                         $watchhtml = "<input tabindex='4' type='checkbox' name='wpWatchthis'".
 996                                 ($this->watchthis?" checked='checked'":"").
 997                                 " accesskey=\"".htmlspecialchars(wfMsg('accesskey-watch'))."\" id='wpWatchthis'  />\n".
 998                                 "<label for='wpWatchthis'".Skin::tooltipAndAccesskey('watch').">{$watchthis}</label>\n";
 999                 }
1000
1001                 $checkboxhtml = $minoredithtml . $watchhtml;
1002
1003                 if ( $wgUser->getOption( 'previewontop' ) ) {
1004
1005                         if ( 'preview' == $this->formtype ) {
1006                                 $this->showPreview();
1007                         } else {
1008                                 $wgOut->addHTML( '<div id="wikiPreview"></div>' );
1009                         }
1010
1011                         if ( 'diff' == $this->formtype ) {
1012                                 $wgOut->addHTML( $this->getDiff() );
1013                         }
1014                 }
1015
1016
1017                 # if this is a comment, show a subject line at the top, which is also the edit summary.
1018                 # Otherwise, show a summary field at the bottom
1019                 $summarytext = htmlspecialchars( $wgContLang->recodeForEdit( $this->summary ) ); # FIXME
1020                 if( $this->section == 'new' ) {
1021                         $commentsubject="<span id='wpSummaryLabel'><label for='wpSummary'>{$subject}:</label></span>\n<div class='editOptions'>\n<input tabindex='1' type='text' value=\"$summarytext\" name='wpSummary' id='wpSummary' maxlength='200' size='60' /><br />";
1022                         $editsummary = '';
1023                 } else {
1024                         $commentsubject = '';
1025                         $editsummary="<span id='wpSummaryLabel'><label for='wpSummary'>{$summary}:</label></span>\n<div class='editOptions'>\n<input tabindex='2' type='text' value=\"$summarytext\" name='wpSummary' id='wpSummary' maxlength='200' size='60' /><br />";
1026                 }
1027
1028                 # Set focus to the edit box on load, except on preview or diff, where it would interfere with the display
1029                 if( !$this->preview && !$this->diff ) {
1030                         $wgOut->setOnloadHandler( 'document.editform.wpTextbox1.focus()' );
1031                 }
1032                 $templates = $this->formatTemplates();
1033
1034                 global $wgUseMetadataEdit ;
1035                 if ( $wgUseMetadataEdit ) {
1036                         $metadata = $this->mMetaData ;
1037                         $metadata = htmlspecialchars( $wgContLang->recodeForEdit( $metadata ) ) ;
1038                         $top = wfMsgWikiHtml( 'metadata_help' );
1039                         $metadata = $top . "<textarea name='metadata' rows='3' cols='{$cols}'{$ew}>{$metadata}</textarea>" ;
1040                 }
1041                 else $metadata = "" ;
1042
1043                 $hidden = '';
1044                 $recreate = '';
1045                 if ($this->deletedSinceEdit) {
1046                         if ( 'save' != $this->formtype ) {
1047                                 $wgOut->addWikiText( wfMsg('deletedwhileediting'));
1048                         } else {
1049                                 // Hide the toolbar and edit area, use can click preview to get it back
1050                                 // Add an confirmation checkbox and explanation.
1051                                 $toolbar = '';
1052                                 $hidden = 'type="hidden" style="display:none;"';
1053                                 $recreate = $wgOut->parse( wfMsg( 'confirmrecreate',  $this->lastDelete->user_name , $this->lastDelete->log_comment ));
1054                                 $recreate .=
1055                                         "<br /><input tabindex='1' type='checkbox' value='1' name='wpRecreate' id='wpRecreate' />".
1056                                         "<label for='wpRecreate' title='".wfMsg('tooltip-recreate')."'>". wfMsg('recreate')."</label>";
1057                         }
1058                 }
1059
1060                 $temp = array(
1061                         'id'        => 'wpSave',
1062                         'name'      => 'wpSave',
1063                         'type'      => 'submit',
1064                         'tabindex'  => '5',
1065                         'value'     => wfMsg('savearticle'),
1066                         'accesskey' => wfMsg('accesskey-save'),
1067                         'title'     => wfMsg( 'tooltip-save' ).' ['.wfMsg( 'accesskey-save' ).']',
1068                 );
1069                 $buttons['save'] = wfElement('input', $temp, '');
1070                 $temp = array(
1071                         'id'        => 'wpDiff',
1072                         'name'      => 'wpDiff',
1073                         'type'      => 'submit',
1074                         'tabindex'  => '7',
1075                         'value'     => wfMsg('showdiff'),
1076                         'accesskey' => wfMsg('accesskey-diff'),
1077                         'title'     => wfMsg( 'tooltip-diff' ).' ['.wfMsg( 'accesskey-diff' ).']',
1078                 );
1079                 $buttons['diff'] = wfElement('input', $temp, '');
1080
1081                 global $wgLivePreview;
1082                 if ( $wgLivePreview && $wgUser->getOption( 'uselivepreview' ) ) {
1083                         $temp = array(
1084                                 'id'        => 'wpPreview',
1085                                 'name'      => 'wpPreview',
1086                                 'type'      => 'submit',
1087                                 'tabindex'  => '6',
1088                                 'value'     => wfMsg('showpreview'),
1089                                 'accesskey' => '',
1090                                 'title'     => wfMsg( 'tooltip-preview' ).' ['.wfMsg( 'accesskey-preview' ).']',
1091                                 'style'     => 'display: none;',
1092                         );
1093                         $buttons['preview'] = wfElement('input', $temp, '');
1094                         $temp = array(
1095                                 'id'        => 'wpLivePreview',
1096                                 'name'      => 'wpLivePreview',
1097                                 'type'      => 'submit',
1098                                 'tabindex'  => '6',
1099                                 'value'     => wfMsg('showlivepreview'),
1100                                 'accesskey' => wfMsg('accesskey-preview'),
1101                                 'title'     => '',
1102                                 'onclick'   => $this->doLivePreviewScript(),
1103                         );
1104                         $buttons['live'] = wfElement('input', $temp, '');
1105                 } else {
1106                         $temp = array(
1107                                 'id'        => 'wpPreview',
1108                                 'name'      => 'wpPreview',
1109                                 'type'      => 'submit',
1110                                 'tabindex'  => '6',
1111                                 'value'     => wfMsg('showpreview'),
1112                                 'accesskey' => wfMsg('accesskey-preview'),
1113                                 'title'     => wfMsg( 'tooltip-preview' ).' ['.wfMsg( 'accesskey-preview' ).']',
1114                         );
1115                         $buttons['preview'] = wfElement('input', $temp, '');
1116                         $buttons['live'] = '';
1117                 }
1118
1119                 $safemodehtml = $this->checkUnicodeCompliantBrowser()
1120                         ? ""
1121                         : "<input type='hidden' name=\"safemode\" value='1' />\n";
1122
1123                 $wgOut->addHTML( <<<END
1124 {$toolbar}
1125 <form id="editform" name="editform" method="post" action="$action" enctype="multipart/form-data">
1126 END
1127 );
1128
1129                 if( is_callable( $formCallback ) ) {
1130                         call_user_func_array( $formCallback, array( &$wgOut ) );
1131                 }
1132
1133                 // Put these up at the top to ensure they aren't lost on early form submission
1134                 $wgOut->addHTML( "
1135 <input type='hidden' value=\"" . htmlspecialchars( $this->section ) . "\" name=\"wpSection\" />
1136 <input type='hidden' value=\"{$this->starttime}\" name=\"wpStarttime\" />\n
1137 <input type='hidden' value=\"{$this->edittime}\" name=\"wpEdittime\" />\n
1138 <input type='hidden' value=\"{$this->scrolltop}\" name=\"wpScrolltop\" id=\"wpScrolltop\" />\n" );
1139
1140                 $wgOut->addHTML( <<<END
1141 $recreate
1142 {$commentsubject}
1143 <textarea tabindex='1' accesskey="," name="wpTextbox1" id="wpTextbox1" rows='{$rows}'
1144 cols='{$cols}'{$ew} $hidden>
1145 END
1146 . htmlspecialchars( $this->safeUnicodeOutput( $this->textbox1 ) ) .
1147 "
1148 </textarea>
1149                 " );
1150
1151                 $wgOut->addWikiText( $copywarn );
1152                 $wgOut->addHTML( "
1153 {$metadata}
1154 {$editsummary}
1155 {$checkboxhtml}
1156 {$safemodehtml}
1157 ");
1158
1159                 $wgOut->addHTML(
1160 "<div class='editButtons'>
1161         {$buttons['save']}
1162         {$buttons['preview']}
1163         {$buttons['live']}
1164         {$buttons['diff']}
1165         <span class='editHelp'>{$cancel} | {$edithelp}</span>
1166 </div><!-- editButtons -->
1167 </div><!-- editOptions -->");
1168
1169                 $wgOut->addWikiText( wfMsgForContent( 'edittools' ) );
1170
1171                 $wgOut->addHTML( "
1172 <div class='templatesUsed'>
1173 {$templates}
1174 </div>
1175 " );
1176
1177                 if ( $wgUser->isLoggedIn() ) {
1178                         /**
1179                          * To make it harder for someone to slip a user a page
1180                          * which submits an edit form to the wiki without their
1181                          * knowledge, a random token is associated with the login
1182                          * session. If it's not passed back with the submission,
1183                          * we won't save the page, or render user JavaScript and
1184                          * CSS previews.
1185                          */
1186                         $token = htmlspecialchars( $wgUser->editToken() );
1187                         $wgOut->addHTML( "\n<input type='hidden' value=\"$token\" name=\"wpEditToken\" />\n" );
1188                 }
1189
1190                 # If a blank edit summary was previously provided, and the appropriate
1191                 # user preference is active, pass a hidden tag here. This will stop the
1192                 # user being bounced back more than once in the event that a summary
1193                 # is not required.
1194                 if( $this->missingSummary ) {
1195                         $wgOut->addHTML( "<input type=\"hidden\" name=\"wpIgnoreBlankSummary\" value=\"1\" />\n" );
1196                 }
1197
1198                 # For a bit more sophisticated detection of blank summaries, hash the
1199                 # automatic one and pass that in a hidden field.
1200                 $autosumm = $this->autoSumm ? $this->autoSumm : md5( $this->summary );
1201                 $wgOut->addHtml( wfHidden( 'wpAutoSummary', $autosumm ) );
1202
1203                 if ( $this->isConflict ) {
1204                         $wgOut->addWikiText( '==' . wfMsg( "yourdiff" ) . '==' );
1205
1206                         $de = new DifferenceEngine( $this->mTitle );
1207                         $de->setText( $this->textbox2, $this->textbox1 );
1208                         $de->showDiff( wfMsg( "yourtext" ), wfMsg( "storedversion" ) );
1209
1210                         $wgOut->addWikiText( '==' . wfMsg( "yourtext" ) . '==' );
1211                         $wgOut->addHTML( "<textarea tabindex=6 id='wpTextbox2' name=\"wpTextbox2\" rows='{$rows}' cols='{$cols}' wrap='virtual'>"
1212                                 . htmlspecialchars( $this->safeUnicodeOutput( $this->textbox2 ) ) . "\n</textarea>" );
1213                 }
1214                 $wgOut->addHTML( "</form>\n" );
1215                 if ( !$wgUser->getOption( 'previewontop' ) ) {
1216
1217                         if ( $this->formtype == 'preview') {
1218                                 $this->showPreview();
1219                         } else {
1220                                 $wgOut->addHTML( '<div id="wikiPreview"></div>' );
1221                         }
1222
1223                         if ( $this->formtype == 'diff') {
1224                                 $wgOut->addHTML( $this->getDiff() );
1225                         }
1226
1227                 }
1228
1229                 wfProfileOut( $fname );
1230         }
1231
1232         /**
1233          * Append preview output to $wgOut.
1234          * Includes category rendering if this is a category page.
1235          * @private
1236          */
1237         function showPreview() {
1238                 global $wgOut;
1239                 $wgOut->addHTML( '<div id="wikiPreview">' );
1240                 if($this->mTitle->getNamespace() == NS_CATEGORY) {
1241                         $this->mArticle->openShowCategory();
1242                 }
1243                 $previewOutput = $this->getPreviewText();
1244                 $wgOut->addHTML( $previewOutput );
1245                 if($this->mTitle->getNamespace() == NS_CATEGORY) {
1246                         $this->mArticle->closeShowCategory();
1247                 }
1248                 $wgOut->addHTML( "<br style=\"clear:both;\" />\n" );
1249                 $wgOut->addHTML( '</div>' );
1250         }
1251
1252         /**
1253          * Prepare a list of templates used by this page. Returns HTML.
1254          */
1255         function formatTemplates() {
1256                 global $wgUser;
1257
1258                 $fname = 'EditPage::formatTemplates';
1259                 wfProfileIn( $fname );
1260
1261                 $sk =& $wgUser->getSkin();
1262
1263                 $outText = '';
1264                 $templates = $this->mArticle->getUsedTemplates();
1265                 if ( count( $templates ) > 0 ) {
1266                         # Do a batch existence check
1267                         $batch = new LinkBatch;
1268                         foreach( $templates as $title ) {
1269                                 $batch->addObj( $title );
1270                         }
1271                         $batch->execute();
1272
1273                         # Construct the HTML
1274                         $outText = '<br />'. wfMsgExt( 'templatesused', array( 'parseinline' ) ) . '<ul>';
1275                         foreach ( $templates as $titleObj ) {
1276                                 $outText .= '<li>' . $sk->makeLinkObj( $titleObj ) . '</li>';
1277                         }
1278                         $outText .= '</ul>';
1279                 }
1280                 wfProfileOut( $fname );
1281                 return $outText;
1282         }
1283
1284         /**
1285          * Live Preview lets us fetch rendered preview page content and
1286          * add it to the page without refreshing the whole page.
1287          * If not supported by the browser it will fall through to the normal form
1288          * submission method.
1289          *
1290          * This function outputs a script tag to support live preview, and
1291          * returns an onclick handler which should be added to the attributes
1292          * of the preview button
1293          */
1294         function doLivePreviewScript() {
1295                 global $wgStylePath, $wgJsMimeType, $wgStyleVersion, $wgOut, $wgTitle;
1296                 $wgOut->addHTML( '<script type="'.$wgJsMimeType.'" src="' .
1297                         htmlspecialchars( "$wgStylePath/common/preview.js?$wgStyleVersion" ) .
1298                         '"></script>' . "\n" );
1299                 $liveAction = $wgTitle->getLocalUrl( 'action=submit&wpPreview=true&live=true' );
1300                 return "return !livePreview(" .
1301                         "getElementById('wikiPreview')," .
1302                         "editform.wpTextbox1.value," .
1303                         '"' . $liveAction . '"' . ")";
1304         }
1305
1306         function getLastDelete() {
1307                 $dbr =& wfGetDB( DB_SLAVE );
1308                 $fname = 'EditPage::getLastDelete';
1309                 $res = $dbr->select(
1310                         array( 'logging', 'user' ),
1311                         array( 'log_type',
1312                                'log_action',
1313                                'log_timestamp',
1314                                'log_user',
1315                                'log_namespace',
1316                                'log_title',
1317                                'log_comment',
1318                                'log_params',
1319                                'user_name', ),
1320                         array( 'log_namespace' => $this->mTitle->getNamespace(),
1321                                'log_title' => $this->mTitle->getDBkey(),
1322                                'log_type' => 'delete',
1323                                'log_action' => 'delete',
1324                                'user_id=log_user' ),
1325                         $fname,
1326                         array( 'LIMIT' => 1, 'ORDER BY' => 'log_timestamp DESC' ) );
1327
1328                 if($dbr->numRows($res) == 1) {
1329                         while ( $x = $dbr->fetchObject ( $res ) )
1330                                 $data = $x;
1331                         $dbr->freeResult ( $res ) ;
1332                 } else {
1333                         $data = null;
1334                 }
1335                 return $data;
1336         }
1337
1338         /**
1339          * @todo document
1340          */
1341         function getPreviewText() {
1342                 global $wgOut, $wgUser, $wgTitle, $wgParser;
1343
1344                 $fname = 'EditPage::getPreviewText';
1345                 wfProfileIn( $fname );
1346
1347                 if ( $this->mTriedSave && !$this->mTokenOk ) {
1348                         $msg = 'session_fail_preview';
1349                 } else {
1350                         $msg = 'previewnote';
1351                 }
1352                 $previewhead = '<h2>' . htmlspecialchars( wfMsg( 'preview' ) ) . "</h2>\n" .
1353                         "<div class='previewnote'>" . $wgOut->parse( wfMsg( $msg ) ) . "</div>\n";
1354                 if ( $this->isConflict ) {
1355                         $previewhead.='<h2>' . htmlspecialchars( wfMsg( 'previewconflict' ) ) . "</h2>\n";
1356                 }
1357
1358                 $parserOptions = ParserOptions::newFromUser( $wgUser );
1359                 $parserOptions->setEditSection( false );
1360
1361                 global $wgRawHtml;
1362                 if( $wgRawHtml && !$this->mTokenOk ) {
1363                         // Could be an offsite preview attempt. This is very unsafe if
1364                         // HTML is enabled, as it could be an attack.
1365                         return $wgOut->parse( "<div class='previewnote'>" .
1366                                 wfMsg( 'session_fail_preview_html' ) . "</div>" );
1367                 }
1368
1369                 # don't parse user css/js, show message about preview
1370                 # XXX: stupid php bug won't let us use $wgTitle->isCssJsSubpage() here
1371
1372                 if ( $this->isCssJsSubpage ) {
1373                         if(preg_match("/\\.css$/", $wgTitle->getText() ) ) {
1374                                 $previewtext = wfMsg('usercsspreview');
1375                         } else if(preg_match("/\\.js$/", $wgTitle->getText() ) ) {
1376                                 $previewtext = wfMsg('userjspreview');
1377                         }
1378                         $parserOptions->setTidy(true);
1379                         $parserOutput = $wgParser->parse( $previewtext , $wgTitle, $parserOptions );
1380                         $wgOut->addHTML( $parserOutput->mText );
1381                         wfProfileOut( $fname );
1382                         return $previewhead;
1383                 } else {
1384                         $toparse = $this->textbox1;
1385
1386                         # If we're adding a comment, we need to show the
1387                         # summary as the headline
1388                         if($this->section=="new" && $this->summary!="") {
1389                                 $toparse="== {$this->summary} ==\n\n".$toparse;
1390                         }
1391
1392                         if ( $this->mMetaData != "" ) $toparse .= "\n" . $this->mMetaData ;
1393                         $parserOptions->setTidy(true);
1394                         $parserOutput = $wgParser->parse( $this->mArticle->preSaveTransform( $toparse ) ."\n\n",
1395                                         $wgTitle, $parserOptions );
1396
1397                         $previewHTML = $parserOutput->getText();
1398                         $wgOut->addParserOutputNoText( $parserOutput );
1399
1400                         wfProfileOut( $fname );
1401                         return $previewhead . $previewHTML;
1402                 }
1403         }
1404
1405         /**
1406          * Call the stock "user is blocked" page
1407          */
1408         function blockedPage() {
1409                 global $wgOut, $wgUser;
1410                 $wgOut->blockedPage( false ); # Standard block notice on the top, don't 'return'
1411
1412                 # If the user made changes, preserve them when showing the markup
1413                 # (This happens when a user is blocked during edit, for instance)
1414                 $first = $this->firsttime || ( !$this->save && $this->textbox1 == '' );
1415                 if( $first ) {
1416                         $source = $this->mTitle->exists() ? $this->getContent() : false;
1417                 } else {
1418                         $source = $this->textbox1;
1419                 }
1420
1421                 # Spit out the source or the user's modified version
1422                 if( $source !== false ) {
1423                         $rows = $wgUser->getOption( 'rows' );
1424                         $cols = $wgUser->getOption( 'cols' );
1425                         $attribs = array( 'id' => 'wpTextbox1', 'name' => 'wpTextbox1', 'cols' => $cols, 'rows' => $rows, 'readonly' => 'readonly' );
1426                         $wgOut->addHtml( '<hr />' );
1427                         $wgOut->addWikiText( wfMsg( $first ? 'blockedoriginalsource' : 'blockededitsource', $this->mTitle->getPrefixedText() ) );
1428                         $wgOut->addHtml( wfOpenElement( 'textarea', $attribs ) . htmlspecialchars( $source ) . wfCloseElement( 'textarea' ) );
1429                 }
1430         }
1431
1432         /**
1433          * Produce the stock "please login to edit pages" page
1434          */
1435         function userNotLoggedInPage() {
1436                 global $wgUser, $wgOut;
1437                 $skin = $wgUser->getSkin();
1438
1439                 $loginTitle = SpecialPage::getTitleFor( 'Userlogin' );
1440                 $loginLink = $skin->makeKnownLinkObj( $loginTitle, wfMsgHtml( 'loginreqlink' ), 'returnto=' . $this->mTitle->getPrefixedUrl() );
1441
1442                 $wgOut->setPageTitle( wfMsg( 'whitelistedittitle' ) );
1443                 $wgOut->setRobotPolicy( 'noindex,nofollow' );
1444                 $wgOut->setArticleRelated( false );
1445
1446                 $wgOut->addHtml( wfMsgWikiHtml( 'whitelistedittext', $loginLink ) );
1447                 $wgOut->returnToMain( false, $this->mTitle->getPrefixedUrl() );
1448         }
1449
1450         /**
1451          * Creates a basic error page which informs the user that
1452          * they have to validate their email address before being
1453          * allowed to edit.
1454          */
1455         function userNotConfirmedPage() {
1456                 global $wgOut;
1457
1458                 $wgOut->setPageTitle( wfMsg( 'confirmedittitle' ) );
1459                 $wgOut->setRobotPolicy( 'noindex,nofollow' );
1460                 $wgOut->setArticleRelated( false );
1461
1462                 $wgOut->addWikiText( wfMsg( 'confirmedittext' ) );
1463                 $wgOut->returnToMain( false );
1464         }
1465
1466         /**
1467          * Produce the stock "your edit contains spam" page
1468          *
1469          * @param $match Text which triggered one or more filters
1470          */
1471         function spamPage( $match = false ) {
1472                 global $wgOut;
1473
1474                 $wgOut->setPageTitle( wfMsg( 'spamprotectiontitle' ) );
1475                 $wgOut->setRobotPolicy( 'noindex,nofollow' );
1476                 $wgOut->setArticleRelated( false );
1477
1478                 $wgOut->addWikiText( wfMsg( 'spamprotectiontext' ) );
1479                 if ( $match )
1480                         $wgOut->addWikiText( wfMsg( 'spamprotectionmatch', "<nowiki>{$match}</nowiki>" ) );
1481
1482                 $wgOut->returnToMain( false );
1483         }
1484
1485         /**
1486          * @private
1487          * @todo document
1488          */
1489         function mergeChangesInto( &$editText ){
1490                 $fname = 'EditPage::mergeChangesInto';
1491                 wfProfileIn( $fname );
1492
1493                 $db =& wfGetDB( DB_MASTER );
1494
1495                 // This is the revision the editor started from
1496                 $baseRevision = Revision::loadFromTimestamp(
1497                         $db, $this->mArticle->mTitle, $this->edittime );
1498                 if( is_null( $baseRevision ) ) {
1499                         wfProfileOut( $fname );
1500                         return false;
1501                 }
1502                 $baseText = $baseRevision->getText();
1503
1504                 // The current state, we want to merge updates into it
1505                 $currentRevision =  Revision::loadFromTitle(
1506                         $db, $this->mArticle->mTitle );
1507                 if( is_null( $currentRevision ) ) {
1508                         wfProfileOut( $fname );
1509                         return false;
1510                 }
1511                 $currentText = $currentRevision->getText();
1512
1513                 if( wfMerge( $baseText, $editText, $currentText, $result ) ){
1514                         $editText = $result;
1515                         wfProfileOut( $fname );
1516                         return true;
1517                 } else {
1518                         wfProfileOut( $fname );
1519                         return false;
1520                 }
1521         }
1522
1523         /**
1524          * Check if the browser is on a blacklist of user-agents known to
1525          * mangle UTF-8 data on form submission. Returns true if Unicode
1526          * should make it through, false if it's known to be a problem.
1527          * @return bool
1528          * @private
1529          */
1530         function checkUnicodeCompliantBrowser() {
1531                 global $wgBrowserBlackList;
1532                 if( empty( $_SERVER["HTTP_USER_AGENT"] ) ) {
1533                         // No User-Agent header sent? Trust it by default...
1534                         return true;
1535                 }
1536                 $currentbrowser = $_SERVER["HTTP_USER_AGENT"];
1537                 foreach ( $wgBrowserBlackList as $browser ) {
1538                         if ( preg_match($browser, $currentbrowser) ) {
1539                                 return false;
1540                         }
1541                 }
1542                 return true;
1543         }
1544
1545         /**
1546          * Format an anchor fragment as it would appear for a given section name
1547          * @param string $text
1548          * @return string
1549          * @private
1550          */
1551         function sectionAnchor( $text ) {
1552                 $headline = Sanitizer::decodeCharReferences( $text );
1553                 # strip out HTML
1554                 $headline = preg_replace( '/<.*?' . '>/', '', $headline );
1555                 $headline = trim( $headline );
1556                 $sectionanchor = '#' . urlencode( str_replace( ' ', '_', $headline ) );
1557                 $replacearray = array(
1558                         '%3A' => ':',
1559                         '%' => '.'
1560                 );
1561                 return str_replace(
1562                         array_keys( $replacearray ),
1563                         array_values( $replacearray ),
1564                         $sectionanchor );
1565         }
1566
1567         /**
1568          * Shows a bulletin board style toolbar for common editing functions.
1569          * It can be disabled in the user preferences.
1570          * The necessary JavaScript code can be found in style/wikibits.js.
1571          */
1572         function getEditToolbar() {
1573                 global $wgStylePath, $wgContLang, $wgJsMimeType;
1574
1575                 /**
1576                  * toolarray an array of arrays which each include the filename of
1577                  * the button image (without path), the opening tag, the closing tag,
1578                  * and optionally a sample text that is inserted between the two when no
1579                  * selection is highlighted.
1580                  * The tip text is shown when the user moves the mouse over the button.
1581                  *
1582                  * Already here are accesskeys (key), which are not used yet until someone
1583                  * can figure out a way to make them work in IE. However, we should make
1584                  * sure these keys are not defined on the edit page.
1585                  */
1586                 $toolarray=array(
1587                         array(  'image'=>'button_bold.png',
1588                                         'open'  =>      "\'\'\'",
1589                                         'close' =>      "\'\'\'",
1590                                         'sample'=>      wfMsg('bold_sample'),
1591                                         'tip'   =>      wfMsg('bold_tip'),
1592                                         'key'   =>      'B'
1593                                 ),
1594                         array(  'image'=>'button_italic.png',
1595                                         'open'  =>      "\'\'",
1596                                         'close' =>      "\'\'",
1597                                         'sample'=>      wfMsg('italic_sample'),
1598                                         'tip'   =>      wfMsg('italic_tip'),
1599                                         'key'   =>      'I'
1600                                 ),
1601                         array(  'image'=>'button_link.png',
1602                                         'open'  =>      '[[',
1603                                         'close' =>      ']]',
1604                                         'sample'=>      wfMsg('link_sample'),
1605                                         'tip'   =>      wfMsg('link_tip'),
1606                                         'key'   =>      'L'
1607                                 ),
1608                         array(  'image'=>'button_extlink.png',
1609                                         'open'  =>      '[',
1610                                         'close' =>      ']',
1611                                         'sample'=>      wfMsg('extlink_sample'),
1612                                         'tip'   =>      wfMsg('extlink_tip'),
1613                                         'key'   =>      'X'
1614                                 ),
1615                         array(  'image'=>'button_headline.png',
1616                                         'open'  =>      "\\n== ",
1617                                         'close' =>      " ==\\n",
1618                                         'sample'=>      wfMsg('headline_sample'),
1619                                         'tip'   =>      wfMsg('headline_tip'),
1620                                         'key'   =>      'H'
1621                                 ),
1622                         array(  'image'=>'button_image.png',
1623                                         'open'  =>      '[['.$wgContLang->getNsText(NS_IMAGE).":",
1624                                         'close' =>      ']]',
1625                                         'sample'=>      wfMsg('image_sample'),
1626                                         'tip'   =>      wfMsg('image_tip'),
1627                                         'key'   =>      'D'
1628                                 ),
1629                         array(  'image' =>'button_media.png',
1630                                         'open'  =>      '[['.$wgContLang->getNsText(NS_MEDIA).':',
1631                                         'close' =>      ']]',
1632                                         'sample'=>      wfMsg('media_sample'),
1633                                         'tip'   =>      wfMsg('media_tip'),
1634                                         'key'   =>      'M'
1635                                 ),
1636                         array(  'image' =>'button_math.png',
1637                                         'open'  =>      "<math>",
1638                                         'close' =>      "<\\/math>",
1639                                         'sample'=>      wfMsg('math_sample'),
1640                                         'tip'   =>      wfMsg('math_tip'),
1641                                         'key'   =>      'C'
1642                                 ),
1643                         array(  'image' =>'button_nowiki.png',
1644                                         'open'  =>      "<nowiki>",
1645                                         'close' =>      "<\\/nowiki>",
1646                                         'sample'=>      wfMsg('nowiki_sample'),
1647                                         'tip'   =>      wfMsg('nowiki_tip'),
1648                                         'key'   =>      'N'
1649                                 ),
1650                         array(  'image' =>'button_sig.png',
1651                                         'open'  =>      '--~~~~',
1652                                         'close' =>      '',
1653                                         'sample'=>      '',
1654                                         'tip'   =>      wfMsg('sig_tip'),
1655                                         'key'   =>      'Y'
1656                                 ),
1657                         array(  'image' =>'button_hr.png',
1658                                         'open'  =>      "\\n----\\n",
1659                                         'close' =>      '',
1660                                         'sample'=>      '',
1661                                         'tip'   =>      wfMsg('hr_tip'),
1662                                         'key'   =>      'R'
1663                                 )
1664                 );
1665                 $toolbar = "<div id='toolbar'>\n";
1666                 $toolbar.="<script type='$wgJsMimeType'>\n/*<![CDATA[*/\n";
1667
1668                 foreach($toolarray as $tool) {
1669
1670                         $image=$wgStylePath.'/common/images/'.$tool['image'];
1671                         $open=$tool['open'];
1672                         $close=$tool['close'];
1673                         $sample = wfEscapeJsString( $tool['sample'] );
1674
1675                         // Note that we use the tip both for the ALT tag and the TITLE tag of the image.
1676                         // Older browsers show a "speedtip" type message only for ALT.
1677                         // Ideally these should be different, realistically they
1678                         // probably don't need to be.
1679                         $tip = wfEscapeJsString( $tool['tip'] );
1680
1681                         #$key = $tool["key"];
1682
1683                         $toolbar.="addButton('$image','$tip','$open','$close','$sample');\n";
1684                 }
1685
1686                 $toolbar.="/*]]>*/\n</script>";
1687                 $toolbar.="\n</div>";
1688                 return $toolbar;
1689         }
1690
1691         /**
1692          * Output preview text only. This can be sucked into the edit page
1693          * via JavaScript, and saves the server time rendering the skin as
1694          * well as theoretically being more robust on the client (doesn't
1695          * disturb the edit box's undo history, won't eat your text on
1696          * failure, etc).
1697          *
1698          * @todo This doesn't include category or interlanguage links.
1699          *       Would need to enhance it a bit, maybe wrap them in XML
1700          *       or something... that might also require more skin
1701          *       initialization, so check whether that's a problem.
1702          */
1703         function livePreview() {
1704                 global $wgOut;
1705                 $wgOut->disable();
1706                 header( 'Content-type: text/xml' );
1707                 header( 'Cache-control: no-cache' );
1708                 # FIXME
1709                 echo $this->getPreviewText( );
1710                 /* To not shake screen up and down between preview and live-preview */
1711                 echo "<br style=\"clear:both;\" />\n";
1712         }
1713
1714
1715         /**
1716          * Get a diff between the current contents of the edit box and the
1717          * version of the page we're editing from.
1718          *
1719          * If this is a section edit, we'll replace the section as for final
1720          * save and then make a comparison.
1721          *
1722          * @return string HTML
1723          */
1724         function getDiff() {
1725                 $oldtext = $this->mArticle->fetchContent();
1726                 $newtext = $this->mArticle->replaceSection(
1727                         $this->section, $this->textbox1, $this->summary, $this->edittime );
1728                 $newtext = $this->mArticle->preSaveTransform( $newtext );
1729                 $oldtitle = wfMsgExt( 'currentrev', array('parseinline') );
1730                 $newtitle = wfMsgExt( 'yourtext', array('parseinline') );
1731                 if ( $oldtext !== false  || $newtext != '' ) {
1732                         $de = new DifferenceEngine( $this->mTitle );
1733                         $de->setText( $oldtext, $newtext );
1734                         $difftext = $de->getDiff( $oldtitle, $newtitle );
1735                 } else {
1736                         $difftext = '';
1737                 }
1738
1739                 return '<div id="wikiDiff">' . $difftext . '</div>';
1740         }
1741
1742         /**
1743          * Filter an input field through a Unicode de-armoring process if it
1744          * came from an old browser with known broken Unicode editing issues.
1745          *
1746          * @param WebRequest $request
1747          * @param string $field
1748          * @return string
1749          * @private
1750          */
1751         function safeUnicodeInput( $request, $field ) {
1752                 $text = rtrim( $request->getText( $field ) );
1753                 return $request->getBool( 'safemode' )
1754                         ? $this->unmakesafe( $text )
1755                         : $text;
1756         }
1757
1758         /**
1759          * Filter an output field through a Unicode armoring process if it is
1760          * going to an old browser with known broken Unicode editing issues.
1761          *
1762          * @param string $text
1763          * @return string
1764          * @private
1765          */
1766         function safeUnicodeOutput( $text ) {
1767                 global $wgContLang;
1768                 $codedText = $wgContLang->recodeForEdit( $text );
1769                 return $this->checkUnicodeCompliantBrowser()
1770                         ? $codedText
1771                         : $this->makesafe( $codedText );
1772         }
1773
1774         /**
1775          * A number of web browsers are known to corrupt non-ASCII characters
1776          * in a UTF-8 text editing environment. To protect against this,
1777          * detected browsers will be served an armored version of the text,
1778          * with non-ASCII chars converted to numeric HTML character references.
1779          *
1780          * Preexisting such character references will have a 0 added to them
1781          * to ensure that round-trips do not alter the original data.
1782          *
1783          * @param string $invalue
1784          * @return string
1785          * @private
1786          */
1787         function makesafe( $invalue ) {
1788                 // Armor existing references for reversability.
1789                 $invalue = strtr( $invalue, array( "&#x" => "&#x0" ) );
1790
1791                 $bytesleft = 0;
1792                 $result = "";
1793                 $working = 0;
1794                 for( $i = 0; $i < strlen( $invalue ); $i++ ) {
1795                         $bytevalue = ord( $invalue{$i} );
1796                         if( $bytevalue <= 0x7F ) { //0xxx xxxx
1797                                 $result .= chr( $bytevalue );
1798                                 $bytesleft = 0;
1799                         } elseif( $bytevalue <= 0xBF ) { //10xx xxxx
1800                                 $working = $working << 6;
1801                                 $working += ($bytevalue & 0x3F);
1802                                 $bytesleft--;
1803                                 if( $bytesleft <= 0 ) {
1804                                         $result .= "&#x" . strtoupper( dechex( $working ) ) . ";";
1805                                 }
1806                         } elseif( $bytevalue <= 0xDF ) { //110x xxxx
1807                                 $working = $bytevalue & 0x1F;
1808                                 $bytesleft = 1;
1809                         } elseif( $bytevalue <= 0xEF ) { //1110 xxxx
1810                                 $working = $bytevalue & 0x0F;
1811                                 $bytesleft = 2;
1812                         } else { //1111 0xxx
1813                                 $working = $bytevalue & 0x07;
1814                                 $bytesleft = 3;
1815                         }
1816                 }
1817                 return $result;
1818         }
1819
1820         /**
1821          * Reverse the previously applied transliteration of non-ASCII characters
1822          * back to UTF-8. Used to protect data from corruption by broken web browsers
1823          * as listed in $wgBrowserBlackList.
1824          *
1825          * @param string $invalue
1826          * @return string
1827          * @private
1828          */
1829         function unmakesafe( $invalue ) {
1830                 $result = "";
1831                 for( $i = 0; $i < strlen( $invalue ); $i++ ) {
1832                         if( ( substr( $invalue, $i, 3 ) == "&#x" ) && ( $invalue{$i+3} != '0' ) ) {
1833                                 $i += 3;
1834                                 $hexstring = "";
1835                                 do {
1836                                         $hexstring .= $invalue{$i};
1837                                         $i++;
1838                                 } while( ctype_xdigit( $invalue{$i} ) && ( $i < strlen( $invalue ) ) );
1839
1840                                 // Do some sanity checks. These aren't needed for reversability,
1841                                 // but should help keep the breakage down if the editor
1842                                 // breaks one of the entities whilst editing.
1843                                 if ((substr($invalue,$i,1)==";") and (strlen($hexstring) <= 6)) {
1844                                         $codepoint = hexdec($hexstring);
1845                                         $result .= codepointToUtf8( $codepoint );
1846                                 } else {
1847                                         $result .= "&#x" . $hexstring . substr( $invalue, $i, 1 );
1848                                 }
1849                         } else {
1850                                 $result .= substr( $invalue, $i, 1 );
1851                         }
1852                 }
1853                 // reverse the transform that we made for reversability reasons.
1854                 return strtr( $result, array( "&#x0" => "&#x" ) );
1855         }
1856
1857         function noCreatePermission() {
1858                 global $wgOut;
1859                 $wgOut->setPageTitle( wfMsg( 'nocreatetitle' ) );
1860                 $wgOut->addWikiText( wfMsg( 'nocreatetext' ) );
1861         }
1862
1863 }
1864
1865 ?>