* (bug 6701) Kazakh language variants in MessagesEn.php
[lhc/web/wiklou.git] / includes / EditPage.php
index 0d8f854..5bf3e76 100644 (file)
@@ -23,7 +23,8 @@ class EditPage {
        var $formtype;
        var $firsttime;
        var $lastDelete;
-       var $mTokenOk = true;
+       var $mTokenOk = false;
+       var $mTriedSave = false;
        var $tooBig = false;
        var $kblength = false;
        var $missingComment = false;
@@ -48,6 +49,74 @@ class EditPage {
                global $wgTitle;
                $this->mTitle =& $wgTitle;
        }
+       
+       /**
+        * Fetch initial editing page content.
+        */
+       private function getContent() {
+               global $wgRequest, $wgParser;
+
+               # Get variables from query string :P
+               $section = $wgRequest->getVal( 'section' );
+               $preload = $wgRequest->getVal( 'preload' );
+
+               wfProfileIn( __METHOD__ );
+
+               $text = '';
+               if( !$this->mTitle->exists() ) {
+
+                       # If requested, preload some text.
+                       $text = $this->getPreloadedText( $preload );
+
+                       # We used to put MediaWiki:Newarticletext here if
+                       # $text was empty at this point.
+                       # This is now shown above the edit box instead.
+               } else {
+                       // FIXME: may be better to use Revision class directly
+                       // But don't mess with it just yet. Article knows how to
+                       // fetch the page record from the high-priority server,
+                       // which is needed to guarantee we don't pick up lagged
+                       // information.
+                       
+                       $text = $this->mArticle->getContent();
+                       
+                       if( $section != '' ) {
+                               if( $section == 'new' ) {
+                                       $text = $this->getPreloadedText( $preload );
+                               } else {
+                                       $text = $wgParser->getSection( $text, $section );
+                               }
+                       }
+               }
+               
+               wfProfileOut( __METHOD__ );
+               return $text;
+       }
+
+       /**
+        * Get the contents of a page from its title and remove includeonly tags
+        *
+        * @param $preload String: the title of the page.
+        * @return string The contents of the page.
+        */
+       private function getPreloadedText($preload) {
+               if ( $preload === '' )
+                       return '';
+               else {
+                       $preloadTitle = Title::newFromText( $preload );
+                       if ( isset( $preloadTitle ) && $preloadTitle->userCanRead() ) {
+                               $rev=Revision::newFromTitle($preloadTitle);
+                               if ( is_object( $rev ) ) {
+                                       $text = $rev->getText();
+                                       // TODO FIXME: AAAAAAAAAAA, this shouldn't be implementing
+                                       // its own mini-parser! -ævar
+                                       $text = preg_replace( '~</?includeonly>~', '', $text );
+                                       return $text;
+                               } else
+                                       return '';
+                       }
+               }
+       }
 
        /**
         * This is the function that extracts metadata from the article body on the first view.
@@ -60,7 +129,7 @@ class EditPage {
                if ( !$wgUseMetadataEdit ) return ;
                if ( $wgMetadataWhitelist == '' ) return ;
                $s = '' ;
-               $t = $this->mArticle->getContent();
+               $t = $this->getContent();
 
                # MISSING : <nowiki> filtering
 
@@ -184,7 +253,7 @@ class EditPage {
 
                if ( ! $this->mTitle->userCanEdit() ) {
                        wfDebug( "$fname: user can't edit\n" );
-                       $wgOut->readOnlyPage( $this->mArticle->getContent(), true );
+                       $wgOut->readOnlyPage( $this->getContent(), true );
                        wfProfileOut( $fname );
                        return;
                }
@@ -193,7 +262,7 @@ class EditPage {
                        # When previewing, don't check blocked state - will get caught at save time.
                        # Also, check when starting edition is done against slave to improve performance.
                        wfDebug( "$fname: user is blocked\n" );
-                       $wgOut->blockedPage();
+                       $this->blockedPage();
                        wfProfileOut( $fname );
                        return;
                }
@@ -205,7 +274,7 @@ class EditPage {
                                return;
                        } else {
                                wfDebug( "$fname: read-only page\n" );
-                               $wgOut->readOnlyPage( $this->mArticle->getContent(), true );
+                               $wgOut->readOnlyPage( $this->getContent(), true );
                                wfProfileOut( $fname );
                                return;
                        }
@@ -216,7 +285,7 @@ class EditPage {
                        wfProfileOut($fname);
                        return;
                }
-               if ( !$this->mTitle->userCan( 'create' ) && !$this->mTitle->exists() ) {
+               if ( !$this->mTitle->userCanCreate() && !$this->mTitle->exists() ) {
                        wfDebug( "$fname: no create permission\n" );
                        $this->noCreatePermission();
                        wfProfileOut( $fname );
@@ -229,7 +298,7 @@ class EditPage {
                        } else if ( $this->diff ) {
                                $this->formtype = 'diff';
                        } else {
-                               $wgOut->readOnlyPage( $this->mArticle->getContent() );
+                               $wgOut->readOnlyPage( $this->getContent() );
                                wfProfileOut( $fname );
                                return;
                        }
@@ -303,6 +372,8 @@ class EditPage {
                # checking, etc.
                if ( 'initial' == $this->formtype || $this->firsttime ) {
                        $this->initialiseForm();
+                       if( !$this->mTitle->getArticleId() ) 
+                               wfRunHooks( 'EditFormPreloadText', array( &$this->textbox1, &$this->mTitle ) );
                }
 
                $this->showEditForm();
@@ -358,19 +429,21 @@ class EditPage {
                                $this->preview = $request->getCheck( 'wpPreview' ) || $request->getCheck( 'wpLivePreview' );
                                $this->diff = $request->getCheck( 'wpDiff' );
 
-                               if( !$this->preview ) {
-                                       if ( $this->tokenOk( $request ) ) {
-                                               # Some browsers will not report any submit button
-                                               # if the user hits enter in the comment box.
-                                               # The unmarked state will be assumed to be a save,
-                                               # if the form seems otherwise complete.
-                                               wfDebug( "$fname: Passed token check.\n" );
-                                       } else {
-                                               # Page might be a hack attempt posted from
-                                               # an external site. Preview instead of saving.
-                                               wfDebug( "$fname: Failed token check; forcing preview\n" );
-                                               $this->preview = true;
-                                       }
+                               // Remember whether a save was requested, so we can indicate
+                               // if we forced preview due to session failure.
+                               $this->mTriedSave = !$this->preview;
+                               
+                               if ( $this->tokenOk( $request ) ) {
+                                       # Some browsers will not report any submit button
+                                       # if the user hits enter in the comment box.
+                                       # The unmarked state will be assumed to be a save,
+                                       # if the form seems otherwise complete.
+                                       wfDebug( "$fname: Passed token check.\n" );
+                               } else {
+                                       # Page might be a hack attempt posted from
+                                       # an external site. Preview instead of saving.
+                                       wfDebug( "$fname: Failed token check; forcing preview\n" );
+                                       $this->preview = true;
                                }
                        }
                        $this->save    = ! ( $this->preview OR $this->diff );
@@ -506,7 +579,7 @@ class EditPage {
                }
                if ( $wgUser->isBlockedFrom( $this->mTitle, false ) ) {
                        # Check block state against master, thus 'false'.
-                       $this->blockedIPpage();
+                       $this->blockedPage();
                        wfProfileOut( "$fname-checks" );
                        wfProfileOut( $fname );
                        return false;
@@ -562,7 +635,7 @@ class EditPage {
                $aid = $this->mTitle->getArticleID( GAID_FOR_UPDATE );
                if ( 0 == $aid ) {
                        // Late check for create permission, just in case *PARANOIA*
-                       if ( !$this->mTitle->userCan( 'create' ) ) {
+                       if ( !$this->mTitle->userCanCreate() ) {
                                wfDebug( "$fname: no create permission\n" );
                                $this->noCreatePermission();
                                wfProfileOut( $fname );
@@ -576,6 +649,14 @@ class EditPage {
                                        return false;
                        }
 
+                       # If no edit comment was given when creating a new page, and what's being
+                       # created is a redirect, be smart and fill in a neat auto-comment
+                       if( $this->summary == '' ) {
+                               $rt = Title::newFromRedirect( $this->textbox1 );
+                               if( is_object( $rt ) )
+                                       $this->summary = wfMsgForContent( 'autoredircomment', $rt->getPrefixedText() );
+                       }
+
                        $isComment=($this->section=='new');
                        $this->mArticle->insertNewArticle( $this->textbox1, $this->summary,
                                $this->minoredit, $this->watchthis, false, $isComment);
@@ -647,6 +728,14 @@ class EditPage {
                        return true;
                }
 
+               # If no edit comment was given when turning a page into a redirect, be smart
+               # and fill in a neat auto-comment
+               if( $this->summary == '' ) {
+                       $rt = Title::newFromRedirect( $this->textbox1 );
+                       if( is_object( $rt ) )
+                               $this->summary = wfMsgForContent( 'autoredircomment', $rt->getPrefixedText() );
+               }
+
                # Handle the user preference to force summaries here
                if( $this->section != 'new' && !$this->allowBlankSummary && $wgUser->getOption( 'forceeditsummary' ) ) {
                        if( md5( $this->summary ) == $this->autoSumm ) {
@@ -713,10 +802,10 @@ class EditPage {
         */
        function initialiseForm() {
                $this->edittime = $this->mArticle->getTimestamp();
-               $this->textbox1 = $this->mArticle->getContent();
+               $this->textbox1 = $this->getContent();
                $this->summary = '';
                if ( !$this->mArticle->exists() && $this->mArticle->mTitle->getNamespace() == NS_MEDIAWIKI )
-                       $this->textbox1 = wfMsgWeirdKey ( $this->mArticle->mTitle->getText() ) ;
+                       $this->textbox1 = wfMsgWeirdKey( $this->mArticle->mTitle->getText() ) ;
                wfProxyCheck();
        }
 
@@ -747,7 +836,7 @@ class EditPage {
                        $wgOut->addWikiText( wfMsg( 'explainconflict' ) );
 
                        $this->textbox2 = $this->textbox1;
-                       $this->textbox1 = $this->mArticle->getContent();
+                       $this->textbox1 = $this->getContent();
                        $this->edittime = $this->mArticle->getTimestamp();
                } else {
 
@@ -756,7 +845,7 @@ class EditPage {
                                        $s = wfMsg('editingcomment', $this->mTitle->getPrefixedText() );
                                } else {
                                        $s = wfMsg('editingsection', $this->mTitle->getPrefixedText() );
-                                       if( !$this->preview && !$this->diff ) {
+                                       if( !$this->summary && !$this->preview && !$this->diff ) {
                                                preg_match( "/^(=+)(.+)\\1/mi",
                                                        $this->textbox1,
                                                        $matches );
@@ -1107,7 +1196,7 @@ END
                # For a bit more sophisticated detection of blank summaries, hash the
                # automatic one and pass that in a hidden field.
                $autosumm = $this->autoSumm ? $this->autoSumm : md5( $this->summary );
-               $wgOut->addHTML( "<input type=\"hidden\" name=\"wpAutoSummary\" value=\"$autosumm\" />\n" );
+               $wgOut->addHtml( wfHidden( 'wpAutoSummary', $autosumm ) );
 
                if ( $this->isConflict ) {
                        require_once( "DifferenceEngine.php" );
@@ -1254,10 +1343,10 @@ END
                $fname = 'EditPage::getPreviewText';
                wfProfileIn( $fname );
 
-               if ( $this->mTokenOk ) {
-                       $msg = 'previewnote';
-               } else {
+               if ( $this->mTriedSave && !$this->mTokenOk ) {
                        $msg = 'session_fail_preview';
+               } else {
+                       $msg = 'previewnote';
                }
                $previewhead = '<h2>' . htmlspecialchars( wfMsg( 'preview' ) ) . "</h2>\n" .
                        "<div class='previewnote'>" . $wgOut->parse( wfMsg( $msg ) ) . "</div>\n";
@@ -1268,9 +1357,17 @@ END
                $parserOptions = ParserOptions::newFromUser( $wgUser );
                $parserOptions->setEditSection( false );
 
+               global $wgRawHtml;
+               if( $wgRawHtml && !$this->mTokenOk ) {
+                       // Could be an offsite preview attempt. This is very unsafe if
+                       // HTML is enabled, as it could be an attack.
+                       return $wgOut->parse( "<div class='previewnote'>" .
+                               wfMsg( 'session_fail_preview_html' ) . "</div>" );
+               }
+
                # don't parse user css/js, show message about preview
                # XXX: stupid php bug won't let us use $wgTitle->isCssJsSubpage() here
-
+               
                if ( $this->isCssJsSubpage ) {
                        if(preg_match("/\\.css$/", $wgTitle->getText() ) ) {
                                $previewtext = wfMsg('usercsspreview');
@@ -1283,11 +1380,6 @@ END
                        wfProfileOut( $fname );
                        return $previewhead;
                } else {
-                       # if user want to see preview when he edit an article
-                       if( $wgUser->getOption('previewonfirst') and ($this->textbox1 == '')) {
-                               $this->textbox1 = $this->mArticle->getContent();
-                       }
-
                        $toparse = $this->textbox1;
 
                        # If we're adding a comment, we need to show the
@@ -1312,9 +1404,28 @@ END
        /**
         * Call the stock "user is blocked" page
         */
-       function blockedIPpage() {
-               global $wgOut;
-               $wgOut->blockedPage();
+       function blockedPage() {
+               global $wgOut, $wgUser;
+               $wgOut->blockedPage( false ); # Standard block notice on the top, don't 'return'
+               
+               # If the user made changes, preserve them when showing the markup
+               # (This happens when a user is blocked during edit, for instance)               
+               $first = $this->firsttime || ( !$this->save && $this->textbox1 == '' );
+               if( $first ) {
+                       $source = $this->mTitle->exists() ? $this->getContent() : false;
+               } else {
+                       $source = $this->textbox1;
+               }
+       
+               # Spit out the source or the user's modified version
+               if( $source !== false ) {
+                       $rows = $wgUser->getOption( 'rows' );
+                       $cols = $wgUser->getOption( 'cols' );
+                       $attribs = array( 'id' => 'wpTextbox1', 'name' => 'wpTextbox1', 'cols' => $cols, 'rows' => $rows, 'readonly' => 'readonly' );
+                       $wgOut->addHtml( '<hr />' );
+                       $wgOut->addWikiText( wfMsg( $first ? 'blockedoriginalsource' : 'blockededitsource', $this->mTitle->getPrefixedText() ) );
+                       $wgOut->addHtml( wfOpenElement( 'textarea', $attribs ) . htmlspecialchars( $source ) . wfCloseElement( 'textarea' ) );
+               }
        }
 
        /**
@@ -1522,15 +1633,15 @@ END
                                        'key'   =>      'M'
                                ),
                        array(  'image' =>'button_math.png',
-                                       'open'  =>      "\\<math\\>",
-                                       'close' =>      "\\</math\\>",
+                                       'open'  =>      "<math>",
+                                       'close' =>      "<\\/math>",
                                        'sample'=>      wfMsg('math_sample'),
                                        'tip'   =>      wfMsg('math_tip'),
                                        'key'   =>      'C'
                                ),
                        array(  'image' =>'button_nowiki.png',
-                                       'open'  =>      "\\<nowiki\\>",
-                                       'close' =>      "\\</nowiki\\>",
+                                       'open'  =>      "<nowiki>",
+                                       'close' =>      "<\\/nowiki>",
                                        'sample'=>      wfMsg('nowiki_sample'),
                                        'tip'   =>      wfMsg('nowiki_tip'),
                                        'key'   =>      'N'
@@ -1614,6 +1725,7 @@ END
                $oldtext = $this->mArticle->fetchContent();
                $newtext = $this->mArticle->replaceSection(
                        $this->section, $this->textbox1, $this->summary, $this->edittime );
+               $newtext = $this->mArticle->preSaveTransform( $newtext );
                $oldtitle = wfMsgExt( 'currentrev', array('parseinline') );
                $newtitle = wfMsgExt( 'yourtext', array('parseinline') );
                if ( $oldtext !== false  || $newtext != '' ) {