includes/EditPage.php

   1 <?php
   2 /**
   3  * Contains the EditPage class
   4  * @file
   5  */
   6
   7 /**
   8  * The edit page/HTML interface (split from Article)
   9  * The actual database and text munging is still in Article,
  10  * but it should get easier to call those from alternate
  11  * interfaces.
  12  *
  13  * EditPage cares about two distinct titles:
  14  * $wgTitle is the page that forms submit to, links point to,
  15  * redirects go to, etc. $this->mTitle (as well as $mArticle) is the
  16  * page in the database that is actually being edited. These are
  17  * usually the same, but they are now allowed to be different.
  18  */
  19 class EditPage {
  20         const AS_SUCCESS_UPDATE            = 200;
  21         const AS_SUCCESS_NEW_ARTICLE       = 201;
  22         const AS_HOOK_ERROR                = 210;
  23         const AS_FILTERING                 = 211;
  24         const AS_HOOK_ERROR_EXPECTED       = 212;
  25         const AS_BLOCKED_PAGE_FOR_USER     = 215;
  26         const AS_CONTENT_TOO_BIG           = 216;
  27         const AS_USER_CANNOT_EDIT          = 217;
  28         const AS_READ_ONLY_PAGE_ANON       = 218;
  29         const AS_READ_ONLY_PAGE_LOGGED     = 219;
  30         const AS_READ_ONLY_PAGE            = 220;
  31         const AS_RATE_LIMITED              = 221;
  32         const AS_ARTICLE_WAS_DELETED       = 222;
  33         const AS_NO_CREATE_PERMISSION      = 223;
  34         const AS_BLANK_ARTICLE             = 224;
  35         const AS_CONFLICT_DETECTED         = 225;
  36         const AS_SUMMARY_NEEDED            = 226;
  37         const AS_TEXTBOX_EMPTY             = 228;
  38         const AS_MAX_ARTICLE_SIZE_EXCEEDED = 229;
  39         const AS_OK                        = 230;
  40         const AS_END                       = 231;
  41         const AS_SPAM_ERROR                = 232;
  42         const AS_IMAGE_REDIRECT_ANON       = 233;
  43         const AS_IMAGE_REDIRECT_LOGGED     = 234;
  44
  45         var $mArticle;
  46         var $mTitle;
  47         var $action;
  48         var $isConflict = false;
  49         var $isCssJsSubpage = false;
  50         var $isCssSubpage = false;
  51         var $isJsSubpage = false;
  52         var $deletedSinceEdit = false;
  53         var $formtype;
  54         var $firsttime;
  55         var $lastDelete;
  56         var $mTokenOk = false;
  57         var $mTokenOkExceptSuffix = false;
  58         var $mTriedSave = false;
  59         var $tooBig = false;
  60         var $kblength = false;
  61         var $missingComment = false;
  62         var $missingSummary = false;
  63         var $allowBlankSummary = false;
  64         var $autoSumm = '';
  65         var $hookError = '';
  66         #var $mPreviewTemplates;
  67         var $mParserOutput;
  68         var $mBaseRevision = false;
  69         var $mShowSummaryField = true;
  70
  71         # Form values
  72         var $save = false, $preview = false, $diff = false;
  73         var $minoredit = false, $watchthis = false, $recreate = false;
  74         var $textbox1 = '', $textbox2 = '', $summary = '', $nosummary = false;
  75         var $edittime = '', $section = '', $starttime = '';
  76         var $oldid = 0, $editintro = '', $scrolltop = null, $bot = true;
  77
  78         # Placeholders for text injection by hooks (must be HTML)
  79         # extensions should take care to _append_ to the present value
  80         public $editFormPageTop; // Before even the preview
  81         public $editFormTextTop;
  82         public $editFormTextBeforeContent;
  83         public $editFormTextAfterWarn;
  84         public $editFormTextAfterTools;
  85         public $editFormTextBottom;
  86         public $editFormTextAfterContent;
  87         public $previewTextAfterContent;
  88
  89         /* $didSave should be set to true whenever an article was succesfully altered. */
  90         public $didSave = false;
  91         public $undidRev = 0;
  92
  93         public $suppressIntro = false;
  94
  95         /**
  96          * @todo document
  97          * @param $article
  98          */
  99         function __construct( $article ) {
 100                 $this->mArticle =& $article;
 101                 $this->mTitle = $article->getTitle();
 102                 $this->action = 'submit';
 103
 104                 # Placeholders for text injection by hooks (empty per default)
 105                 $this->editFormPageTop =
 106                 $this->editFormTextTop =
 107                 $this->editFormTextBeforeContent =
 108                 $this->editFormTextAfterWarn =
 109                 $this->editFormTextAfterTools =
 110                 $this->editFormTextBottom =
 111                 $this->editFormTextAfterContent =
 112                 $this->previewTextAfterContent =
 113                 $this->mPreloadText = "";
 114         }
 115
 116         function getArticle() {
 117                 return $this->mArticle;
 118         }
 119
 120
 121         /**
 122          * Fetch initial editing page content.
 123          * @returns mixed string on success, $def_text for invalid sections
 124          * @private
 125          */
 126         function getContent( $def_text = '' ) {
 127                 global $wgOut, $wgRequest, $wgParser, $wgContLang, $wgMessageCache;
 128
 129                 wfProfileIn( __METHOD__ );
 130                 # Get variables from query string :P
 131                 $section = $wgRequest->getVal( 'section' );
 132
 133                 $preload = $wgRequest->getVal( 'preload',
 134                         // Custom preload text for new sections
 135                         $section === 'new' ? 'MediaWiki:addsection-preload' : '' );
 136                 $undoafter = $wgRequest->getVal( 'undoafter' );
 137                 $undo = $wgRequest->getVal( 'undo' );
 138
 139                 $text = '';
 140                 // For message page not locally set, use the i18n message.
 141                 // For other non-existent articles, use preload text if any.
 142                 if ( !$this->mTitle->exists() ) {
 143                         if ( $this->mTitle->getNamespace() == NS_MEDIAWIKI ) {
 144                                 # If this is a system message, get the default text.
 145                                 list( $message, $lang ) = $wgMessageCache->figureMessage( $wgContLang->lcfirst( $this->mTitle->getText() ) );
 146                                 $text = wfMsgGetKey( $message, false, $lang, false );
 147                                 if( wfEmptyMsg( $message, $text ) )
 148                                         $text = $this->getPreloadedText( $preload );
 149                         } else {
 150                                 # If requested, preload some text.
 151                                 $text = $this->getPreloadedText( $preload );
 152                         }
 153                 // For existing pages, get text based on "undo" or section parameters.
 154                 } else {
 155                         $text = $this->mArticle->getContent();
 156                         if ( $undo > 0 && $undoafter > 0 && $undo < $undoafter ) {
 157                                 # If they got undoafter and undo round the wrong way, switch them
 158                                 list( $undo, $undoafter ) = array( $undoafter, $undo );
 159                         }
 160                         if ( $undo > 0 && $undo > $undoafter ) {
 161                                 # Undoing a specific edit overrides section editing; section-editing
 162                                 # doesn't work with undoing.
 163                                 if ( $undoafter ) {
 164                                         $undorev = Revision::newFromId( $undo );
 165                                         $oldrev = Revision::newFromId( $undoafter );
 166                                 } else {
 167                                         $undorev = Revision::newFromId( $undo );
 168                                         $oldrev = $undorev ? $undorev->getPrevious() : null;
 169                                 }
 170
 171                                 # Sanity check, make sure it's the right page,
 172                                 # the revisions exist and they were not deleted.
 173                                 # Otherwise, $text will be left as-is.
 174                                 if ( !is_null( $undorev ) && !is_null( $oldrev ) &&
 175                                         $undorev->getPage() == $oldrev->getPage() &&
 176                                         $undorev->getPage() == $this->mArticle->getID() &&
 177                                         !$undorev->isDeleted( Revision::DELETED_TEXT ) &&
 178                                         !$oldrev->isDeleted( Revision::DELETED_TEXT ) ) {
 179
 180                                         $undotext = $this->mArticle->getUndoText( $undorev, $oldrev );
 181                                         if ( $undotext === false ) {
 182                                                 # Warn the user that something went wrong
 183                                                 $this->editFormPageTop .= $wgOut->parse( '<div class="error mw-undo-failure">' . wfMsgNoTrans( 'undo-failure' ) . '</div>' );
 184                                         } else {
 185                                                 $text = $undotext;
 186                                                 # Inform the user of our success and set an automatic edit summary
 187                                                 $this->editFormPageTop .= $wgOut->parse( '<div class="mw-undo-success">' . wfMsgNoTrans( 'undo-success' ) . '</div>' );
 188                                                 $firstrev = $oldrev->getNext();
 189                                                 # If we just undid one rev, use an autosummary
 190                                                 if ( $firstrev->mId == $undo ) {
 191                                                         $this->summary = wfMsgForContent( 'undo-summary', $undo, $undorev->getUserText() );
 192                                                         $this->undidRev = $undo;
 193                                                 }
 194                                                 $this->formtype = 'diff';
 195                                         }
 196                                 } else {
 197                                         // Failed basic sanity checks.
 198                                         // Older revisions may have been removed since the link
 199                                         // was created, or we may simply have got bogus input.
 200                                         $this->editFormPageTop .= $wgOut->parse( '<div class="error mw-undo-norev">' . wfMsgNoTrans( 'undo-norev' ) . '</div>' );
 201                                 }
 202                         } else if ( $section != '' ) {
 203                                 if ( $section == 'new' ) {
 204                                         $text = $this->getPreloadedText( $preload );
 205                                 } else {
 206                                         // Get section edit text (returns $def_text for invalid sections)
 207                                         $text = $wgParser->getSection( $text, $section, $def_text );
 208                                 }
 209                         }
 210                 }
 211
 212                 wfProfileOut( __METHOD__ );
 213                 return $text;
 214         }
 215
 216         /** Use this method before edit() to preload some text into the edit box */
 217         public function setPreloadedText( $text ) {
 218                 $this->mPreloadText = $text;
 219         }
 220
 221         /**
 222          * Get the contents to be preloaded into the box, either set by
 223          * an earlier setPreloadText() or by loading the given page.
 224          *
 225          * @param $preload String: representing the title to preload from.
 226          * @return String
 227          */
 228         protected function getPreloadedText( $preload ) {
 229                 global $wgUser, $wgParser;
 230                 if ( !empty( $this->mPreloadText ) ) {
 231                         return $this->mPreloadText;
 232                 } elseif ( $preload !== '' ) {
 233                         $title = Title::newFromText( $preload );
 234                         # Check for existence to avoid getting MediaWiki:Noarticletext
 235                         if ( isset( $title ) && $title->exists() && $title->userCanRead() ) {
 236                                 $article = new Article( $title );
 237
 238                                 if ( $article->isRedirect() ) {
 239                                         $title = Title::newFromRedirectRecurse( $article->getContent() );
 240                                         # Redirects to missing titles are displayed, to hidden pages are followed
 241                                         # Copying observed behaviour from ?action=view
 242                                         if ( $title->exists() ) {
 243                                                 if ($title->userCanRead() ) {
 244                                                         $article = new Article( $title );
 245                                                 } else {
 246                                                         return "";
 247                                                 }
 248                                         }
 249                                 }
 250                                 $parserOptions = ParserOptions::newFromUser( $wgUser );
 251                                 return $wgParser->getPreloadText( $article->getContent(), $title, $parserOptions );
 252                         }
 253                 }
 254                 return '';
 255         }
 256
 257         /*
 258          * Check if a page was deleted while the user was editing it, before submit.
 259          * Note that we rely on the logging table, which hasn't been always there,
 260          * but that doesn't matter, because this only applies to brand new
 261          * deletes.
 262          */
 263         protected function wasDeletedSinceLastEdit() {
 264                 if ( $this->deletedSinceEdit )
 265                         return true;
 266                 if ( $this->mTitle->isDeletedQuick() ) {
 267                         $this->lastDelete = $this->getLastDelete();
 268                         if ( $this->lastDelete ) {
 269                                 $deleteTime = wfTimestamp( TS_MW, $this->lastDelete->log_timestamp );
 270                                 if ( $deleteTime > $this->starttime ) {
 271                                         $this->deletedSinceEdit = true;
 272                                 }
 273                         }
 274                 }
 275                 return $this->deletedSinceEdit;
 276         }
 277
 278         function submit() {
 279                 $this->edit();
 280         }
 281
 282         /**
 283          * This is the function that gets called for "action=edit". It
 284          * sets up various member variables, then passes execution to
 285          * another function, usually showEditForm()
 286          *
 287          * The edit form is self-submitting, so that when things like
 288          * preview and edit conflicts occur, we get the same form back
 289          * with the extra stuff added.  Only when the final submission
 290          * is made and all is well do we actually save and redirect to
 291          * the newly-edited page.
 292          */
 293         function edit() {
 294                 global $wgOut, $wgRequest, $wgUser;
 295                 // Allow extensions to modify/prevent this form or submission
 296                 if ( !wfRunHooks( 'AlternateEdit', array( $this ) ) ) {
 297                         return;
 298                 }
 299
 300                 wfProfileIn( __METHOD__ );
 301                 wfDebug( __METHOD__.": enter\n" );
 302
 303                 // This is not an article
 304                 $wgOut->setArticleFlag( false );
 305
 306                 $this->importFormData( $wgRequest );
 307                 $this->firsttime = false;
 308
 309                 if ( $this->live ) {
 310                         $this->livePreview();
 311                         wfProfileOut( __METHOD__ );
 312                         return;
 313                 }
 314
 315                 if ( wfReadOnly() && $this->save ) {
 316                         // Force preview
 317                         $this->save = false;
 318                         $this->preview = true;
 319                 }
 320
 321                 $wgOut->addModules( 'mediawiki.legacy.edit' );
 322
 323                 if ( $wgUser->getOption( 'uselivepreview', false ) ) {
 324                         $wgOut->includeJQuery();
 325                         $wgOut->addModules( 'mediawiki.legacy.preview' );
 326                 }
 327                 // Bug #19334: textarea jumps when editing articles in IE8
 328                 $wgOut->addStyle( 'common/IE80Fixes.css', 'screen', 'IE 8' );
 329
 330                 $permErrors = $this->getEditPermissionErrors();
 331                 if ( $permErrors ) {
 332                         wfDebug( __METHOD__ . ": User can't edit\n" );
 333                         $content = $this->getContent( null );
 334                         $content = $content === '' ? null : $content;
 335                         $this->readOnlyPage( $content, true, $permErrors, 'edit' );
 336                         wfProfileOut( __METHOD__ );
 337                         return;
 338                 } else {
 339                         if ( $this->save ) {
 340                                 $this->formtype = 'save';
 341                         } else if ( $this->preview ) {
 342                                 $this->formtype = 'preview';
 343                         } else if ( $this->diff ) {
 344                                 $this->formtype = 'diff';
 345                         } else { # First time through
 346                                 $this->firsttime = true;
 347                                 if ( $this->previewOnOpen() ) {
 348                                         $this->formtype = 'preview';
 349                                 } else {
 350                                         $this->formtype = 'initial';
 351                                 }
 352                         }
 353                 }
 354
 355                 // If they used redlink=1 and the page exists, redirect to the main article
 356                 if ( $wgRequest->getBool( 'redlink' ) && $this->mTitle->exists() ) {
 357                         $wgOut->redirect( $this->mTitle->getFullURL() );
 358                 }
 359
 360                 wfProfileIn( __METHOD__."-business-end" );
 361
 362                 $this->isConflict = false;
 363                 // css / js subpages of user pages get a special treatment
 364                 $this->isCssJsSubpage      = $this->mTitle->isCssJsSubpage();
 365                 $this->isCssSubpage        = $this->mTitle->isCssSubpage();
 366                 $this->isJsSubpage         = $this->mTitle->isJsSubpage();
 367                 $this->isValidCssJsSubpage = $this->mTitle->isValidCssJsSubpage();
 368
 369                 # Show applicable editing introductions
 370                 if ( $this->formtype == 'initial' || $this->firsttime )
 371                         $this->showIntro();
 372
 373                 if ( $this->mTitle->isTalkPage() ) {
 374                         $wgOut->addWikiMsg( 'talkpagetext' );
 375                 }
 376
 377                 # Optional notices on a per-namespace and per-page basis
 378                 $editnotice_ns   = 'editnotice-'.$this->mTitle->getNamespace();
 379                 if ( !wfEmptyMsg( $editnotice_ns, wfMsgForContent( $editnotice_ns ) ) ) {
 380                         $wgOut->addWikiText( wfMsgForContent( $editnotice_ns )  );
 381                 }
 382                 if ( MWNamespace::hasSubpages( $this->mTitle->getNamespace() ) ) {
 383                         $parts = explode( '/', $this->mTitle->getDBkey() );
 384                         $editnotice_base = $editnotice_ns;
 385                         while ( count( $parts ) > 0 ) {
 386                                 $editnotice_base .= '-'.array_shift( $parts );
 387                                 if ( !wfEmptyMsg( $editnotice_base, wfMsgForContent( $editnotice_base ) ) ) {
 388                                         $wgOut->addWikiText( wfMsgForContent( $editnotice_base )  );
 389                                 }
 390                         }
 391                 }
 392
 393                 # Attempt submission here.  This will check for edit conflicts,
 394                 # and redundantly check for locked database, blocked IPs, etc.
 395                 # that edit() already checked just in case someone tries to sneak
 396                 # in the back door with a hand-edited submission URL.
 397
 398                 if ( 'save' == $this->formtype ) {
 399                         if ( !$this->attemptSave() ) {
 400                                 wfProfileOut( __METHOD__."-business-end" );
 401                                 wfProfileOut( __METHOD__ );
 402                                 return;
 403                         }
 404                 }
 405
 406                 # First time through: get contents, set time for conflict
 407                 # checking, etc.
 408                 if ( 'initial' == $this->formtype || $this->firsttime ) {
 409                         if ( $this->initialiseForm() === false ) {
 410                                 $this->noSuchSectionPage();
 411                                 wfProfileOut( __METHOD__."-business-end" );
 412                                 wfProfileOut( __METHOD__ );
 413                                 return;
 414                         }
 415                         if ( !$this->mTitle->getArticleId() )
 416                                 wfRunHooks( 'EditFormPreloadText', array( &$this->textbox1, &$this->mTitle ) );
 417                         else
 418                                 wfRunHooks( 'EditFormInitialText', array( $this ) );
 419                 }
 420
 421                 $this->showEditForm();
 422                 wfProfileOut( __METHOD__."-business-end" );
 423                 wfProfileOut( __METHOD__ );
 424         }
 425
 426         protected function getEditPermissionErrors() {
 427                 global $wgUser;
 428                 $permErrors = $this->mTitle->getUserPermissionsErrors( 'edit', $wgUser );
 429                 # Can this title be created?
 430                 if ( !$this->mTitle->exists() ) {
 431                         $permErrors = array_merge( $permErrors,
 432                                 wfArrayDiff2( $this->mTitle->getUserPermissionsErrors( 'create', $wgUser ), $permErrors ) );
 433                 }
 434                 # Ignore some permissions errors when a user is just previewing/viewing diffs
 435                 $remove = array();
 436                 foreach( $permErrors as $error ) {
 437                         if ( ( $this->preview || $this->diff ) &&
 438                                 ( $error[0] == 'blockedtext' || $error[0] == 'autoblockedtext' ) )
 439                         {
 440                                 $remove[] = $error;
 441                         }
 442                 }
 443                 $permErrors = wfArrayDiff2( $permErrors, $remove );
 444                 return $permErrors;
 445         }
 446
 447         /**
 448          * Show a read-only error
 449          * Parameters are the same as OutputPage:readOnlyPage()
 450          * Redirect to the article page if redlink=1
 451          */
 452         function readOnlyPage( $source = null, $protected = false, $reasons = array(), $action = null ) {
 453                 global $wgRequest, $wgOut;
 454                 if ( $wgRequest->getBool( 'redlink' ) ) {
 455                         // The edit page was reached via a red link.
 456                         // Redirect to the article page and let them click the edit tab if
 457                         // they really want a permission error.
 458                         $wgOut->redirect( $this->mTitle->getFullUrl() );
 459                 } else {
 460                         $wgOut->readOnlyPage( $source, $protected, $reasons, $action );
 461                 }
 462         }
 463
 464         /**
 465          * Should we show a preview when the edit form is first shown?
 466          *
 467          * @return bool
 468          */
 469         protected function previewOnOpen() {
 470                 global $wgRequest, $wgUser, $wgPreviewOnOpenNamespaces;
 471                 if ( $wgRequest->getVal( 'preview' ) == 'yes' ) {
 472                         // Explicit override from request
 473                         return true;
 474                 } elseif ( $wgRequest->getVal( 'preview' ) == 'no' ) {
 475                         // Explicit override from request
 476                         return false;
 477                 } elseif ( $this->section == 'new' ) {
 478                         // Nothing *to* preview for new sections
 479                         return false;
 480                 } elseif ( ( $wgRequest->getVal( 'preload' ) !== null || $this->mTitle->exists() ) && $wgUser->getOption( 'previewonfirst' ) ) {
 481                         // Standard preference behaviour
 482                         return true;
 483                 } elseif ( !$this->mTitle->exists() &&
 484                   isset($wgPreviewOnOpenNamespaces[$this->mTitle->getNamespace()]) &&
 485                   $wgPreviewOnOpenNamespaces[$this->mTitle->getNamespace()] )
 486                 {
 487                         // Categories are special
 488                         return true;
 489                 } else {
 490                         return false;
 491                 }
 492         }
 493
 494         /**
 495          * Does this EditPage class support section editing?
 496          * This is used by EditPage subclasses to indicate their ui cannot handle section edits
 497          *
 498          * @return bool
 499          */
 500         protected function isSectionEditSupported() {
 501                 return true;
 502         }
 503
 504         /**
 505          * Returns the URL to use in the form's action attribute.
 506          * This is used by EditPage subclasses when simply customizing the action
 507          * variable in the constructor is not enough. This can be used when the
 508          * EditPage lives inside of a Special page rather than a custom page action.
 509          *
 510          * @param $title Title object for which is being edited (where we go to for &action= links)
 511          * @return string
 512          */
 513         protected function getActionURL( Title $title ) {
 514                 return $title->getLocalURL( array( 'action' => $this->action ) );
 515         }
 516
 517         /**
 518          * @todo document
 519          * @param $request
 520          */
 521         function importFormData( &$request ) {
 522                 global $wgLang, $wgUser;
 523
 524                 wfProfileIn( __METHOD__ );
 525
 526                 # Section edit can come from either the form or a link
 527                 $this->section = $request->getVal( 'wpSection', $request->getVal( 'section' ) );
 528
 529                 if ( $request->wasPosted() ) {
 530                         # These fields need to be checked for encoding.
 531                         # Also remove trailing whitespace, but don't remove _initial_
 532                         # whitespace from the text boxes. This may be significant formatting.
 533                         $this->textbox1 = $this->safeUnicodeInput( $request, 'wpTextbox1' );
 534                         if ( !$request->getCheck('wpTextbox2') ) {
 535                                 // Skip this if wpTextbox2 has input, it indicates that we came
 536                                 // from a conflict page with raw page text, not a custom form
 537                                 // modified by subclasses
 538                                 wfProfileIn( get_class($this)."::importContentFormData" );
 539                                 $textbox1 = $this->importContentFormData( $request );
 540                                 if ( isset($textbox1) )
 541                                         $this->textbox1 = $textbox1;
 542                                 wfProfileOut( get_class($this)."::importContentFormData" );
 543                         }
 544
 545                         # Truncate for whole multibyte characters. +5 bytes for ellipsis
 546                         $this->summary = $wgLang->truncate( $request->getText( 'wpSummary' ), 250, '' );
 547
 548                         # Remove extra headings from summaries and new sections.
 549                         $this->summary = preg_replace('/^\s*=+\s*(.*?)\s*=+\s*$/', '$1', $this->summary);
 550
 551                         $this->edittime = $request->getVal( 'wpEdittime' );
 552                         $this->starttime = $request->getVal( 'wpStarttime' );
 553
 554                         $this->scrolltop = $request->getIntOrNull( 'wpScrolltop' );
 555
 556                         if ( is_null( $this->edittime ) ) {
 557                                 # If the form is incomplete, force to preview.
 558                                 wfDebug( __METHOD__ . ": Form data appears to be incomplete\n" );
 559                                 wfDebug( "POST DATA: " . var_export( $_POST, true ) . "\n" );
 560                                 $this->preview = true;
 561                         } else {
 562                                 /* Fallback for live preview */
 563                                 $this->preview = $request->getCheck( 'wpPreview' ) || $request->getCheck( 'wpLivePreview' );
 564                                 $this->diff = $request->getCheck( 'wpDiff' );
 565
 566                                 // Remember whether a save was requested, so we can indicate
 567                                 // if we forced preview due to session failure.
 568                                 $this->mTriedSave = !$this->preview;
 569
 570                                 if ( $this->tokenOk( $request ) ) {
 571                                         # Some browsers will not report any submit button
 572                                         # if the user hits enter in the comment box.
 573                                         # The unmarked state will be assumed to be a save,
 574                                         # if the form seems otherwise complete.
 575                                         wfDebug( __METHOD__ . ": Passed token check.\n" );
 576                                 } else if ( $this->diff ) {
 577                                         # Failed token check, but only requested "Show Changes".
 578                                         wfDebug( __METHOD__ . ": Failed token check; Show Changes requested.\n" );
 579                                 } else {
 580                                         # Page might be a hack attempt posted from
 581                                         # an external site. Preview instead of saving.
 582                                         wfDebug( __METHOD__ . ": Failed token check; forcing preview\n" );
 583                                         $this->preview = true;
 584                                 }
 585                         }
 586                         $this->save = !$this->preview && !$this->diff;
 587                         if ( !preg_match( '/^\d{14}$/', $this->edittime ) ) {
 588                                 $this->edittime = null;
 589                         }
 590
 591                         if ( !preg_match( '/^\d{14}$/', $this->starttime ) ) {
 592                                 $this->starttime = null;
 593                         }
 594
 595                         $this->recreate  = $request->getCheck( 'wpRecreate' );
 596
 597                         $this->minoredit = $request->getCheck( 'wpMinoredit' );
 598                         $this->watchthis = $request->getCheck( 'wpWatchthis' );
 599
 600                         # Don't force edit summaries when a user is editing their own user or talk page
 601                         if ( ( $this->mTitle->mNamespace == NS_USER || $this->mTitle->mNamespace == NS_USER_TALK ) &&
 602                                 $this->mTitle->getText() == $wgUser->getName() )
 603                         {
 604                                 $this->allowBlankSummary = true;
 605                         } else {
 606                                 $this->allowBlankSummary = $request->getBool( 'wpIgnoreBlankSummary' ) || !$wgUser->getOption( 'forceeditsummary');
 607                         }
 608
 609                         $this->autoSumm = $request->getText( 'wpAutoSummary' );
 610                 } else {
 611                         # Not a posted form? Start with nothing.
 612                         wfDebug( __METHOD__ . ": Not a posted form.\n" );
 613                         $this->textbox1  = '';
 614                         $this->summary   = '';
 615                         $this->edittime  = '';
 616                         $this->starttime = wfTimestampNow();
 617                         $this->edit      = false;
 618                         $this->preview   = false;
 619                         $this->save      = false;
 620                         $this->diff      = false;
 621                         $this->minoredit = false;
 622                         $this->watchthis = $request->getBool( 'watchthis', false ); // Watch may be overriden by request parameters
 623                         $this->recreate  = false;
 624
 625                         if ( $this->section == 'new' && $request->getVal( 'preloadtitle' ) ) {
 626                                 $this->summary = $request->getVal( 'preloadtitle' );
 627                         }
 628                         elseif ( $this->section != 'new' && $request->getVal( 'summary' ) ) {
 629                                 $this->summary = $request->getText( 'summary' );
 630                         }
 631
 632                         if ( $request->getVal( 'minor' ) ) {
 633                                 $this->minoredit = true;
 634                         }
 635                 }
 636
 637                 $this->bot = $request->getBool( 'bot', true );
 638                 $this->nosummary = $request->getBool( 'nosummary' );
 639
 640                 // FIXME: unused variable?
 641                 $this->oldid = $request->getInt( 'oldid' );
 642
 643                 $this->live = $request->getCheck( 'live' );
 644                 $this->editintro = $request->getText( 'editintro',
 645                         // Custom edit intro for new sections
 646                         $this->section === 'new' ? 'MediaWiki:addsection-editintro' : '' );
 647
 648                 wfProfileOut( __METHOD__ );
 649
 650                 // Allow extensions to modify form data
 651                 wfRunHooks( 'EditPage::importFormData', array( $this, $request ) );
 652         }
 653
 654         /**
 655          * Subpage overridable method for extracting the page content data from the
 656          * posted form to be placed in $this->textbox1, if using customized input
 657          * this method should be overrided and return the page text that will be used
 658          * for saving, preview parsing and so on...
 659          *
 660          * @param $request WebRequest
 661          */
 662         protected function importContentFormData( &$request ) {
 663                 return; // Don't do anything, EditPage already extracted wpTextbox1
 664         }
 665
 666         /**
 667          * Make sure the form isn't faking a user's credentials.
 668          *
 669          * @param $request WebRequest
 670          * @return bool
 671          * @private
 672          */
 673         function tokenOk( &$request ) {
 674                 global $wgUser;
 675                 $token = $request->getVal( 'wpEditToken' );
 676                 $this->mTokenOk = $wgUser->matchEditToken( $token );
 677                 $this->mTokenOkExceptSuffix = $wgUser->matchEditTokenNoSuffix( $token );
 678                 return $this->mTokenOk;
 679         }
 680
 681         /**
 682          * Show all applicable editing introductions
 683          */
 684         protected function showIntro() {
 685                 global $wgOut, $wgUser;
 686                 if ( $this->suppressIntro ) {
 687                         return;
 688                 }
 689
 690                 $namespace = $this->mTitle->getNamespace();
 691
 692                 if ( $namespace == NS_MEDIAWIKI ) {
 693                         # Show a warning if editing an interface message
 694                         $wgOut->wrapWikiMsg( "<div class='mw-editinginterface'>\n$1\n</div>", 'editinginterface' );
 695                 }
 696
 697                 # Show a warning message when someone creates/edits a user (talk) page but the user does not exist
 698                 # Show log extract when the user is currently blocked
 699                 if ( $namespace == NS_USER || $namespace == NS_USER_TALK ) {
 700                         $parts = explode( '/', $this->mTitle->getText(), 2 );
 701                         $username = $parts[0];
 702                         $user = User::newFromName( $username, false /* allow IP users*/ );
 703                         $ip = User::isIP( $username );
 704                         if ( !$user->isLoggedIn() && !$ip ) { # User does not exist
 705                                 $wgOut->wrapWikiMsg( "<div class=\"mw-userpage-userdoesnotexist error\">\n$1\n</div>",
 706                                         array( 'userpage-userdoesnotexist', $username ) );
 707                         } else if ( $user->isBlocked() ) { # Show log extract if the user is currently blocked
 708                                 LogEventsList::showLogExtract(
 709                                         $wgOut,
 710                                         'block',
 711                                         $user->getUserPage()->getPrefixedText(),
 712                                         '',
 713                                         array(
 714                                                 'lim' => 1,
 715                                                 'showIfEmpty' => false,
 716                                                 'msgKey' => array(
 717                                                         'blocked-notice-logextract',
 718                                                         $user->getName() # Support GENDER in notice
 719                                                 )
 720                                         )
 721                                 );
 722                         }
 723                 }
 724                 # Try to add a custom edit intro, or use the standard one if this is not possible.
 725                 if ( !$this->showCustomIntro() && !$this->mTitle->exists() ) {
 726                         if ( $wgUser->isLoggedIn() ) {
 727                                 $wgOut->wrapWikiMsg( "<div class=\"mw-newarticletext\">\n$1\n</div>", 'newarticletext' );
 728                         } else {
 729                                 $wgOut->wrapWikiMsg( "<div class=\"mw-newarticletextanon\">\n$1\n</div>", 'newarticletextanon' );
 730                         }
 731                 }
 732                 # Give a notice if the user is editing a deleted/moved page...
 733                 if ( !$this->mTitle->exists() ) {
 734                         LogEventsList::showLogExtract( $wgOut, array( 'delete', 'move' ), $this->mTitle->getPrefixedText(),
 735                                 '', array( 'lim' => 10,
 736                                            'conds' => array( "log_action != 'revision'" ),
 737                                            'showIfEmpty' => false,
 738                                            'msgKey' => array( 'recreate-moveddeleted-warn') )
 739                         );
 740                 }
 741         }
 742
 743         /**
 744          * Attempt to show a custom editing introduction, if supplied
 745          *
 746          * @return bool
 747          */
 748         protected function showCustomIntro() {
 749                 if ( $this->editintro ) {
 750                         $title = Title::newFromText( $this->editintro );
 751                         if ( $title instanceof Title && $title->exists() && $title->userCanRead() ) {
 752                                 global $wgOut;
 753                                 $revision = Revision::newFromTitle( $title );
 754                                 $wgOut->addWikiTextTitleTidy( $revision->getText(), $this->mTitle );
 755                                 return true;
 756                         } else {
 757                                 return false;
 758                         }
 759                 } else {
 760                         return false;
 761                 }
 762         }
 763
 764         /**
 765          * Attempt submission (no UI)
 766          * @return one of the constants describing the result
 767          */
 768         function internalAttemptSave( &$result, $bot = false ) {
 769                 global $wgFilterCallback, $wgUser, $wgParser;
 770                 global $wgMaxArticleSize;
 771
 772                 wfProfileIn( __METHOD__  );
 773                 wfProfileIn( __METHOD__ . '-checks' );
 774
 775                 if ( !wfRunHooks( 'EditPage::attemptSave', array( $this ) ) ) {
 776                         wfDebug( "Hook 'EditPage::attemptSave' aborted article saving\n" );
 777                         return self::AS_HOOK_ERROR;
 778                 }
 779
 780                 # Check image redirect
 781                 if ( $this->mTitle->getNamespace() == NS_FILE &&
 782                         Title::newFromRedirect( $this->textbox1 ) instanceof Title &&
 783                         !$wgUser->isAllowed( 'upload' ) ) {
 784                                 if ( $wgUser->isAnon() ) {
 785                                         return self::AS_IMAGE_REDIRECT_ANON;
 786                                 } else {
 787                                         return self::AS_IMAGE_REDIRECT_LOGGED;
 788                                 }
 789                 }
 790
 791                 # Check for spam
 792                 $match = self::matchSummarySpamRegex( $this->summary );
 793                 if ( $match === false ) {
 794                         $match = self::matchSpamRegex( $this->textbox1 );
 795                 }
 796                 if ( $match !== false ) {
 797                         $result['spam'] = $match;
 798                         $ip = wfGetIP();
 799                         $pdbk = $this->mTitle->getPrefixedDBkey();
 800                         $match = str_replace( "\n", '', $match );
 801                         wfDebugLog( 'SpamRegex', "$ip spam regex hit [[$pdbk]]: \"$match\"" );
 802                         wfProfileOut( __METHOD__ . '-checks' );
 803                         wfProfileOut( __METHOD__ );
 804                         return self::AS_SPAM_ERROR;
 805                 }
 806                 if ( $wgFilterCallback && $wgFilterCallback( $this->mTitle, $this->textbox1, $this->section, $this->hookError, $this->summary ) ) {
 807                         # Error messages or other handling should be performed by the filter function
 808                         wfProfileOut( __METHOD__ . '-checks' );
 809                         wfProfileOut( __METHOD__ );
 810                         return self::AS_FILTERING;
 811                 }
 812                 if ( !wfRunHooks( 'EditFilter', array( $this, $this->textbox1, $this->section, &$this->hookError, $this->summary ) ) ) {
 813                         # Error messages etc. could be handled within the hook...
 814                         wfProfileOut( __METHOD__ . '-checks' );
 815                         wfProfileOut( __METHOD__ );
 816                         return self::AS_HOOK_ERROR;
 817                 } elseif ( $this->hookError != '' ) {
 818                         # ...or the hook could be expecting us to produce an error
 819                         wfProfileOut( __METHOD__ . '-checks' );
 820                         wfProfileOut( __METHOD__ );
 821                         return self::AS_HOOK_ERROR_EXPECTED;
 822                 }
 823                 if ( $wgUser->isBlockedFrom( $this->mTitle, false ) ) {
 824                         # Check block state against master, thus 'false'.
 825                         wfProfileOut( __METHOD__ . '-checks' );
 826                         wfProfileOut( __METHOD__ );
 827                         return self::AS_BLOCKED_PAGE_FOR_USER;
 828                 }
 829                 $this->kblength = (int)( strlen( $this->textbox1 ) / 1024 );
 830                 if ( $this->kblength > $wgMaxArticleSize ) {
 831                         // Error will be displayed by showEditForm()
 832                         $this->tooBig = true;
 833                         wfProfileOut( __METHOD__ . '-checks' );
 834                         wfProfileOut( __METHOD__ );
 835                         return self::AS_CONTENT_TOO_BIG;
 836                 }
 837
 838                 if ( !$wgUser->isAllowed( 'edit' ) ) {
 839                         if ( $wgUser->isAnon() ) {
 840                                 wfProfileOut( __METHOD__ . '-checks' );
 841                                 wfProfileOut( __METHOD__ );
 842                                 return self::AS_READ_ONLY_PAGE_ANON;
 843                         } else {
 844                                 wfProfileOut( __METHOD__ . '-checks' );
 845                                 wfProfileOut( __METHOD__ );
 846                                 return self::AS_READ_ONLY_PAGE_LOGGED;
 847                         }
 848                 }
 849
 850                 if ( wfReadOnly() ) {
 851                         wfProfileOut( __METHOD__ . '-checks' );
 852                         wfProfileOut( __METHOD__ );
 853                         return self::AS_READ_ONLY_PAGE;
 854                 }
 855                 if ( $wgUser->pingLimiter() ) {
 856                         wfProfileOut( __METHOD__ . '-checks' );
 857                         wfProfileOut( __METHOD__ );
 858                         return self::AS_RATE_LIMITED;
 859                 }
 860
 861                 # If the article has been deleted while editing, don't save it without
 862                 # confirmation
 863                 if ( $this->wasDeletedSinceLastEdit() && !$this->recreate ) {
 864                         wfProfileOut( __METHOD__ . '-checks' );
 865                         wfProfileOut( __METHOD__ );
 866                         return self::AS_ARTICLE_WAS_DELETED;
 867                 }
 868
 869                 wfProfileOut( __METHOD__ . '-checks' );
 870
 871                 # If article is new, insert it.
 872                 $aid = $this->mTitle->getArticleID( GAID_FOR_UPDATE );
 873                 if ( 0 == $aid ) {
 874                         // Late check for create permission, just in case *PARANOIA*
 875                         if ( !$this->mTitle->userCan( 'create' ) ) {
 876                                 wfDebug( __METHOD__ . ": no create permission\n" );
 877                                 wfProfileOut( __METHOD__ );
 878                                 return self::AS_NO_CREATE_PERMISSION;
 879                         }
 880
 881                         # Don't save a new article if it's blank.
 882                         if ( $this->textbox1 == '' ) {
 883                                 wfProfileOut( __METHOD__ );
 884                                 return self::AS_BLANK_ARTICLE;
 885                         }
 886
 887                         // Run post-section-merge edit filter
 888                         if ( !wfRunHooks( 'EditFilterMerged', array( $this, $this->textbox1, &$this->hookError, $this->summary ) ) ) {
 889                                 # Error messages etc. could be handled within the hook...
 890                                 wfProfileOut( __METHOD__ );
 891                                 return self::AS_HOOK_ERROR;
 892                         } elseif ( $this->hookError != '' ) {
 893                                 # ...or the hook could be expecting us to produce an error
 894                                 wfProfileOut( __METHOD__ );
 895                                 return self::AS_HOOK_ERROR_EXPECTED;
 896                         }
 897
 898                         # Handle the user preference to force summaries here. Check if it's not a redirect.
 899                         if ( !$this->allowBlankSummary && !Title::newFromRedirect( $this->textbox1 ) ) {
 900                                 if ( md5( $this->summary ) == $this->autoSumm ) {
 901                                         $this->missingSummary = true;
 902                                         wfProfileOut( __METHOD__ );
 903                                         return self::AS_SUMMARY_NEEDED;
 904                                 }
 905                         }
 906
 907                         $isComment = ( $this->section == 'new' );
 908
 909                         $this->mArticle->insertNewArticle( $this->textbox1, $this->summary,
 910                                 $this->minoredit, $this->watchthis, false, $isComment, $bot );
 911
 912                         wfProfileOut( __METHOD__ );
 913                         return self::AS_SUCCESS_NEW_ARTICLE;
 914                 }
 915
 916                 # Article exists. Check for edit conflict.
 917
 918                 $this->mArticle->clear(); # Force reload of dates, etc.
 919                 $this->mArticle->forUpdate( true ); # Lock the article
 920
 921                 wfDebug( "timestamp: {$this->mArticle->getTimestamp()}, edittime: {$this->edittime}\n" );
 922
 923                 if ( $this->mArticle->getTimestamp() != $this->edittime ) {
 924                         $this->isConflict = true;
 925                         if ( $this->section == 'new' ) {
 926                                 if ( $this->mArticle->getUserText() == $wgUser->getName() &&
 927                                         $this->mArticle->getComment() == $this->summary ) {
 928                                         // Probably a duplicate submission of a new comment.
 929                                         // This can happen when squid resends a request after
 930                                         // a timeout but the first one actually went through.
 931                                         wfDebug( __METHOD__ . ": duplicate new section submission; trigger edit conflict!\n" );
 932                                 } else {
 933                                         // New comment; suppress conflict.
 934                                         $this->isConflict = false;
 935                                         wfDebug( __METHOD__ .": conflict suppressed; new section\n" );
 936                                 }
 937                         }
 938                 }
 939                 $userid = $wgUser->getId();
 940
 941                 # Suppress edit conflict with self, except for section edits where merging is required.
 942                 if ( $this->isConflict && $this->section == '' && $this->userWasLastToEdit( $userid, $this->edittime ) ) {
 943                         wfDebug( __METHOD__ . ": Suppressing edit conflict, same user.\n" );
 944                         $this->isConflict = false;
 945                 }
 946
 947                 if ( $this->isConflict ) {
 948                         wfDebug( __METHOD__ . ": conflict! getting section '$this->section' for time '$this->edittime' (article time '" .
 949                                 $this->mArticle->getTimestamp() . "')\n" );
 950                         $text = $this->mArticle->replaceSection( $this->section, $this->textbox1, $this->summary, $this->edittime );
 951                 } else {
 952                         wfDebug( __METHOD__ . ": getting section '$this->section'\n" );
 953                         $text = $this->mArticle->replaceSection( $this->section, $this->textbox1, $this->summary );
 954                 }
 955                 if ( is_null( $text ) ) {
 956                         wfDebug( __METHOD__ . ": activating conflict; section replace failed.\n" );
 957                         $this->isConflict = true;
 958                         $text = $this->textbox1; // do not try to merge here!
 959                 } else if ( $this->isConflict ) {
 960                         # Attempt merge
 961                         if ( $this->mergeChangesInto( $text ) ) {
 962                                 // Successful merge! Maybe we should tell the user the good news?
 963                                 $this->isConflict = false;
 964                                 wfDebug( __METHOD__ . ": Suppressing edit conflict, successful merge.\n" );
 965                         } else {
 966                                 $this->section = '';
 967                                 $this->textbox1 = $text;
 968                                 wfDebug( __METHOD__ . ": Keeping edit conflict, failed merge.\n" );
 969                         }
 970                 }
 971
 972                 if ( $this->isConflict ) {
 973                         wfProfileOut( __METHOD__ );
 974                         return self::AS_CONFLICT_DETECTED;
 975                 }
 976
 977                 $oldtext = $this->mArticle->getContent();
 978
 979                 // Run post-section-merge edit filter
 980                 if ( !wfRunHooks( 'EditFilterMerged', array( $this, $text, &$this->hookError, $this->summary ) ) ) {
 981                         # Error messages etc. could be handled within the hook...
 982                         wfProfileOut( __METHOD__ );
 983                         return self::AS_HOOK_ERROR;
 984                 } elseif ( $this->hookError != '' ) {
 985                         # ...or the hook could be expecting us to produce an error
 986                         wfProfileOut( __METHOD__ );
 987                         return self::AS_HOOK_ERROR_EXPECTED;
 988                 }
 989
 990                 # Handle the user preference to force summaries here, but not for null edits
 991                 if ( $this->section != 'new' && !$this->allowBlankSummary && 0 != strcmp( $oldtext, $text )
 992                         && !Title::newFromRedirect( $text ) ) # check if it's not a redirect
 993                 {
 994                         if ( md5( $this->summary ) == $this->autoSumm ) {
 995                                 $this->missingSummary = true;
 996                                 wfProfileOut( __METHOD__ );
 997                                 return self::AS_SUMMARY_NEEDED;
 998                         }
 999                 }
1000
1001                 # And a similar thing for new sections
1002                 if ( $this->section == 'new' && !$this->allowBlankSummary ) {
1003                         if ( trim( $this->summary ) == '' ) {
1004                                 $this->missingSummary = true;
1005                                 wfProfileOut( __METHOD__ );
1006                                 return self::AS_SUMMARY_NEEDED;
1007                         }
1008                 }
1009
1010                 # All's well
1011                 wfProfileIn( __METHOD__ . '-sectionanchor' );
1012                 $sectionanchor = '';
1013                 if ( $this->section == 'new' ) {
1014                         if ( $this->textbox1 == '' ) {
1015                                 $this->missingComment = true;
1016                                 wfProfileOut( __METHOD__ . '-sectionanchor' );
1017                                 wfProfileOut( __METHOD__ );
1018                                 return self::AS_TEXTBOX_EMPTY;
1019                         }
1020                         if ( $this->summary != '' ) {
1021                                 $sectionanchor = $wgParser->guessLegacySectionNameFromWikiText( $this->summary );
1022                                 # This is a new section, so create a link to the new section
1023                                 # in the revision summary.
1024                                 $cleanSummary = $wgParser->stripSectionName( $this->summary );
1025                                 $this->summary = wfMsgForContent( 'newsectionsummary', $cleanSummary );
1026                         }
1027                 } elseif ( $this->section != '' ) {
1028                         # Try to get a section anchor from the section source, redirect to edited section if header found
1029                         # XXX: might be better to integrate this into Article::replaceSection
1030                         # for duplicate heading checking and maybe parsing
1031                         $hasmatch = preg_match( "/^ *([=]{1,6})(.*?)(\\1) *\\n/i", $this->textbox1, $matches );
1032                         # we can't deal with anchors, includes, html etc in the header for now,
1033                         # headline would need to be parsed to improve this
1034                         if ( $hasmatch and strlen( $matches[2] ) > 0 ) {
1035                                 $sectionanchor = $wgParser->guessLegacySectionNameFromWikiText( $matches[2] );
1036                         }
1037                 }
1038                 wfProfileOut( __METHOD__ . '-sectionanchor' );
1039
1040                 // Save errors may fall down to the edit form, but we've now
1041                 // merged the section into full text. Clear the section field
1042                 // so that later submission of conflict forms won't try to
1043                 // replace that into a duplicated mess.
1044                 $this->textbox1 = $text;
1045                 $this->section = '';
1046
1047                 // Check for length errors again now that the section is merged in
1048                 $this->kblength = (int)( strlen( $text ) / 1024 );
1049                 if ( $this->kblength > $wgMaxArticleSize ) {
1050                         $this->tooBig = true;
1051                         wfProfileOut( __METHOD__ );
1052                         return self::AS_MAX_ARTICLE_SIZE_EXCEEDED;
1053                 }
1054
1055                 # update the article here
1056                 if ( $this->mArticle->updateArticle( $text, $this->summary, $this->minoredit,
1057                         $this->watchthis, $bot, $sectionanchor ) )
1058                 {
1059                         wfProfileOut( __METHOD__ );
1060                         return self::AS_SUCCESS_UPDATE;
1061                 } else {
1062                         $this->isConflict = true;
1063                 }
1064                 wfProfileOut( __METHOD__ );
1065                 return self::AS_END;
1066         }
1067
1068         /**
1069          * Check if no edits were made by other users since
1070          * the time a user started editing the page. Limit to
1071          * 50 revisions for the sake of performance.
1072          */
1073         protected function userWasLastToEdit( $id, $edittime ) {
1074                 if( !$id ) return false;
1075                 $dbw = wfGetDB( DB_MASTER );
1076                 $res = $dbw->select( 'revision',
1077                         'rev_user',
1078                         array(
1079                                 'rev_page' => $this->mArticle->getId(),
1080                                 'rev_timestamp > '.$dbw->addQuotes( $dbw->timestamp($edittime) )
1081                         ),
1082                         __METHOD__,
1083                         array( 'ORDER BY' => 'rev_timestamp ASC', 'LIMIT' => 50 ) );
1084                 while( $row = $res->fetchObject() ) {
1085                         if( $row->rev_user != $id ) {
1086                                 return false;
1087                         }
1088                 }
1089                 return true;
1090         }
1091
1092         /**
1093          * Check given input text against $wgSpamRegex, and return the text of the first match.
1094          * @return mixed -- matching string or false
1095          */
1096         public static function matchSpamRegex( $text ) {
1097                 global $wgSpamRegex;
1098                 // For back compatibility, $wgSpamRegex may be a single string or an array of regexes.
1099                 $regexes = (array)$wgSpamRegex;
1100                 return self::matchSpamRegexInternal( $text, $regexes );
1101         }
1102
1103         /**
1104          * Check given input text against $wgSpamRegex, and return the text of the first match.
1105          * @return mixed -- matching string or false
1106          */
1107         public static function matchSummarySpamRegex( $text ) {
1108                 global $wgSummarySpamRegex;
1109                 $regexes = (array)$wgSummarySpamRegex;
1110                 return self::matchSpamRegexInternal( $text, $regexes );
1111         }
1112
1113         protected static function matchSpamRegexInternal( $text, $regexes ) {
1114                 foreach( $regexes as $regex ) {
1115                         $matches = array();
1116                         if( preg_match( $regex, $text, $matches ) ) {
1117                                 return $matches[0];
1118                         }
1119                 }
1120                 return false;
1121         }
1122
1123         /**
1124          * Initialise form fields in the object
1125          * Called on the first invocation, e.g. when a user clicks an edit link
1126          * @returns bool -- if the requested section is valid
1127          */
1128         function initialiseForm() {
1129                 global $wgUser;
1130                 $this->edittime = $this->mArticle->getTimestamp();
1131                 $this->textbox1 = $this->getContent( false );
1132                 // activate checkboxes if user wants them to be always active
1133                 # Sort out the "watch" checkbox
1134                 if ( $wgUser->getOption( 'watchdefault' ) ) {
1135                         # Watch all edits
1136                         $this->watchthis = true;
1137                 } elseif ( $wgUser->getOption( 'watchcreations' ) && !$this->mTitle->exists() ) {
1138                         # Watch creations
1139                         $this->watchthis = true;
1140                 } elseif ( $this->mTitle->userIsWatching() ) {
1141                         # Already watched
1142                         $this->watchthis = true;
1143                 }
1144                 if ( $this->textbox1 === false ) return false;
1145                 wfProxyCheck();
1146                 return true;
1147         }
1148
1149         function setHeaders() {
1150                 global $wgOut, $wgTitle;
1151                 $wgOut->setRobotPolicy( 'noindex,nofollow' );
1152                 if ( $this->formtype == 'preview' ) {
1153                         $wgOut->setPageTitleActionText( wfMsg( 'preview' ) );
1154                 }
1155                 if ( $this->isConflict ) {
1156                         $wgOut->setPageTitle( wfMsg( 'editconflict', $wgTitle->getPrefixedText() ) );
1157                 } elseif ( $this->section != '' ) {
1158                         $msg = $this->section == 'new' ? 'editingcomment' : 'editingsection';
1159                         $wgOut->setPageTitle( wfMsg( $msg, $wgTitle->getPrefixedText() ) );
1160                 } else {
1161                         # Use the title defined by DISPLAYTITLE magic word when present
1162                         if ( isset( $this->mParserOutput )
1163                          && ( $dt = $this->mParserOutput->getDisplayTitle() ) !== false ) {
1164                                 $title = $dt;
1165                         } else {
1166                                 $title = $wgTitle->getPrefixedText();
1167                         }
1168                         $wgOut->setPageTitle( wfMsg( 'editing', $title ) );
1169                 }
1170         }
1171
1172         /**
1173          * Send the edit form and related headers to $wgOut
1174          * @param $formCallback Optional callable that takes an OutputPage
1175          *                      parameter; will be called during form output
1176          *                      near the top, for captchas and the like.
1177          */
1178         function showEditForm( $formCallback = null ) {
1179                 global $wgOut, $wgUser, $wgTitle;
1180
1181                 # If $wgTitle is null, that means we're in API mode.
1182                 # Some hook probably called this function  without checking
1183                 # for is_null($wgTitle) first. Bail out right here so we don't
1184                 # do lots of work just to discard it right after.
1185                 if ( is_null( $wgTitle ) )
1186                         return;
1187
1188                 wfProfileIn( __METHOD__ );
1189
1190                 $sk = $wgUser->getSkin();
1191
1192                 #need to parse the preview early so that we know which templates are used,
1193                 #otherwise users with "show preview after edit box" will get a blank list
1194                 #we parse this near the beginning so that setHeaders can do the title
1195                 #setting work instead of leaving it in getPreviewText
1196                 $previewOutput = '';
1197                 if ( $this->formtype == 'preview' ) {
1198                         $previewOutput = $this->getPreviewText();
1199                 }
1200
1201                 wfRunHooks( 'EditPage::showEditForm:initial', array( &$this ) );
1202
1203                 $this->setHeaders();
1204
1205                 # Enabled article-related sidebar, toplinks, etc.
1206                 $wgOut->setArticleRelated( true );
1207
1208                 if ( $this->showHeader() === false )
1209                         return;
1210
1211                 $action = htmlspecialchars($this->getActionURL($wgTitle));
1212
1213                 if ( $wgUser->getOption( 'showtoolbar' ) and !$this->isCssJsSubpage ) {
1214                         # prepare toolbar for edit buttons
1215                         $toolbar = EditPage::getEditToolbar();
1216                 } else {
1217                         $toolbar = '';
1218                 }
1219
1220
1221                 $wgOut->addHTML( $this->editFormPageTop );
1222
1223                 if ( $wgUser->getOption( 'previewontop' ) ) {
1224                         $this->displayPreviewArea( $previewOutput, true );
1225                 }
1226
1227                 $wgOut->addHTML( $this->editFormTextTop );
1228
1229                 $templates = $this->getTemplates();
1230                 $formattedtemplates = $sk->formatTemplates( $templates, $this->preview, $this->section != '');
1231
1232                 $hiddencats = $this->mArticle->getHiddenCategories();
1233                 $formattedhiddencats = $sk->formatHiddenCategories( $hiddencats );
1234
1235                 if ( $this->wasDeletedSinceLastEdit() && 'save' != $this->formtype ) {
1236                         $wgOut->wrapWikiMsg(
1237                                 "<div class='error mw-deleted-while-editing'>\n$1\n</div>",
1238                                 'deletedwhileediting' );
1239                 } elseif ( $this->wasDeletedSinceLastEdit() ) {
1240                         // Hide the toolbar and edit area, user can click preview to get it back
1241                         // Add an confirmation checkbox and explanation.
1242                         $toolbar = '';
1243                         // @todo move this to a cleaner conditional instead of blanking a variable
1244                 }
1245                 $wgOut->addHTML( <<<HTML
1246 {$toolbar}
1247 <form id="editform" name="editform" method="post" action="$action" enctype="multipart/form-data">
1248 HTML
1249 );
1250
1251                 if ( is_callable( $formCallback ) ) {
1252                         call_user_func_array( $formCallback, array( &$wgOut ) );
1253                 }
1254
1255                 wfRunHooks( 'EditPage::showEditForm:fields', array( &$this, &$wgOut ) );
1256
1257                 // Put these up at the top to ensure they aren't lost on early form submission
1258                 $this->showFormBeforeText();
1259
1260                 if ( $this->wasDeletedSinceLastEdit() && 'save' == $this->formtype ) {
1261                         $wgOut->addHTML(
1262                                 '<div class="mw-confirm-recreate">' .
1263                                 $wgOut->parse( wfMsg( 'confirmrecreate',  $this->lastDelete->user_name , $this->lastDelete->log_comment ) ) .
1264                                 Xml::checkLabel( wfMsg( 'recreate' ), 'wpRecreate', 'wpRecreate', false,
1265                                         array( 'title' => $sk->titleAttrib( 'recreate' ), 'tabindex' => 1, 'id' => 'wpRecreate' )
1266                                 ) .
1267                                 '</div>'
1268                         );
1269                 }
1270
1271                 # If a blank edit summary was previously provided, and the appropriate
1272                 # user preference is active, pass a hidden tag as wpIgnoreBlankSummary. This will stop the
1273                 # user being bounced back more than once in the event that a summary
1274                 # is not required.
1275                 #####
1276                 # For a bit more sophisticated detection of blank summaries, hash the
1277                 # automatic one and pass that in the hidden field wpAutoSummary.
1278                 if ( $this->missingSummary ||
1279                         ( $this->section == 'new' && $this->nosummary ) )
1280                                 $wgOut->addHTML( Xml::hidden( 'wpIgnoreBlankSummary', true ) );
1281                 $autosumm = $this->autoSumm ? $this->autoSumm : md5( $this->summary );
1282                 $wgOut->addHTML( Xml::hidden( 'wpAutoSummary', $autosumm ) );
1283
1284                 $wgOut->addHTML( Xml::hidden( 'oldid', $this->mArticle->getOldID() ) );
1285
1286                 if ( $this->section == 'new' ) {
1287                         $this->showSummaryInput( true, $this->summary );
1288                         $wgOut->addHTML( $this->getSummaryPreview( true, $this->summary ) );
1289                 }
1290
1291                 $wgOut->addHTML( $this->editFormTextBeforeContent );
1292
1293                 if ( $this->isConflict ) {
1294                         // In an edit conflict bypass the overrideable content form method
1295                         // and fallback to the raw wpTextbox1 since editconflicts can't be
1296                         // resolved between page source edits and custom ui edits using the
1297                         // custom edit ui.
1298                         $this->showTextbox1( null, $this->getContent() );
1299                 } else {
1300                         $this->showContentForm();
1301                 }
1302
1303                 $wgOut->addHTML( $this->editFormTextAfterContent );
1304
1305                 $wgOut->addWikiText( $this->getCopywarn() );
1306                 if ( isset($this->editFormTextAfterWarn) && $this->editFormTextAfterWarn !== '' )
1307                         $wgOut->addHTML( $this->editFormTextAfterWarn );
1308
1309                 $this->showStandardInputs();
1310
1311                 $this->showFormAfterText();
1312
1313                 $this->showTosSummary();
1314                 $this->showEditTools();
1315
1316                 $wgOut->addHTML( <<<HTML
1317 {$this->editFormTextAfterTools}
1318 <div class='templatesUsed'>
1319 {$formattedtemplates}
1320 </div>
1321 <div class='hiddencats'>
1322 {$formattedhiddencats}
1323 </div>
1324 HTML
1325 );
1326
1327                 if ( $this->isConflict )
1328                         $this->showConflict();
1329
1330                 $wgOut->addHTML( $this->editFormTextBottom );
1331                 $wgOut->addHTML( "</form>\n" );
1332                 if ( !$wgUser->getOption( 'previewontop' ) ) {
1333                         $this->displayPreviewArea( $previewOutput, false );
1334                 }
1335
1336                 wfProfileOut( __METHOD__ );
1337         }
1338
1339         protected function showHeader() {
1340                 global $wgOut, $wgUser, $wgTitle, $wgMaxArticleSize, $wgLang;
1341                 if ( $this->isConflict ) {
1342                         $wgOut->wrapWikiMsg( "<div class='mw-explainconflict'>\n$1\n</div>", 'explainconflict' );
1343                         $this->edittime = $this->mArticle->getTimestamp();
1344                 } else {
1345                         if ( $this->section != '' && !$this->isSectionEditSupported() ) {
1346                                 // We use $this->section to much before this and getVal('wgSection') directly in other places
1347                                 // at this point we can't reset $this->section to '' to fallback to non-section editing.
1348                                 // Someone is welcome to try refactoring though
1349                                 $wgOut->showErrorPage( 'sectioneditnotsupported-title', 'sectioneditnotsupported-text' );
1350                                 return false;
1351                         }
1352
1353                         if ( $this->section != '' && $this->section != 'new' ) {
1354                                 $matches = array();
1355                                 if ( !$this->summary && !$this->preview && !$this->diff ) {
1356                                         preg_match( "/^(=+)(.+)\\1/mi", $this->textbox1, $matches );
1357                                         if ( !empty( $matches[2] ) ) {
1358                                                 global $wgParser;
1359                                                 $this->summary = "/* " .
1360                                                         $wgParser->stripSectionName(trim($matches[2])) .
1361                                                         " */ ";
1362                                         }
1363                                 }
1364                         }
1365
1366                         if ( $this->missingComment ) {
1367                                 $wgOut->wrapWikiMsg( "<div id='mw-missingcommenttext'>\n$1\n</div>", 'missingcommenttext' );
1368                         }
1369
1370                         if ( $this->missingSummary && $this->section != 'new' ) {
1371                                 $wgOut->wrapWikiMsg( "<div id='mw-missingsummary'>\n$1\n</div>", 'missingsummary' );
1372                         }
1373
1374                         if ( $this->missingSummary && $this->section == 'new' ) {
1375                                 $wgOut->wrapWikiMsg( "<div id='mw-missingcommentheader'>\n$1\n</div>", 'missingcommentheader' );
1376                         }
1377
1378                         if ( $this->hookError !== '' ) {
1379                                 $wgOut->addWikiText( $this->hookError );
1380                         }
1381
1382                         if ( !$this->checkUnicodeCompliantBrowser() ) {
1383                                 $wgOut->addWikiMsg( 'nonunicodebrowser' );
1384                         }
1385
1386                         if ( isset( $this->mArticle ) && isset( $this->mArticle->mRevision ) ) {
1387                         // Let sysop know that this will make private content public if saved
1388
1389                                 if ( !$this->mArticle->mRevision->userCan( Revision::DELETED_TEXT ) ) {
1390                                         $wgOut->wrapWikiMsg( "<div class='mw-warning plainlinks'>\n$1\n</div>\n", 'rev-deleted-text-permission' );
1391                                 } else if ( $this->mArticle->mRevision->isDeleted( Revision::DELETED_TEXT ) ) {
1392                                         $wgOut->wrapWikiMsg( "<div class='mw-warning plainlinks'>\n$1\n</div>\n", 'rev-deleted-text-view' );
1393                                 }
1394
1395                                 if ( !$this->mArticle->mRevision->isCurrent() ) {
1396                                         $this->mArticle->setOldSubtitle( $this->mArticle->mRevision->getId() );
1397                                         $wgOut->addWikiMsg( 'editingold' );
1398                                 }
1399                         }
1400                 }
1401
1402                 if ( wfReadOnly() ) {
1403                         $wgOut->wrapWikiMsg( "<div id=\"mw-read-only-warning\">\n$1\n</div>", array( 'readonlywarning', wfReadOnlyReason() ) );
1404                 } elseif ( $wgUser->isAnon() ) {
1405                         if ( $this->formtype != 'preview' ) {
1406                                 $wgOut->wrapWikiMsg( "<div id=\"mw-anon-edit-warning\">\n$1</div>", 'anoneditwarning' );
1407                         } else {
1408                                 $wgOut->wrapWikiMsg( "<div id=\"mw-anon-preview-warning\">\n$1</div>", 'anonpreviewwarning' );
1409                         }
1410                 } else {
1411                         if ( $this->isCssJsSubpage ) {
1412                                 # Check the skin exists
1413                                 if ( !$this->isValidCssJsSubpage ) {
1414                                         $wgOut->wrapWikiMsg( "<div class='error' id='mw-userinvalidcssjstitle'>\n$1\n</div>", array( 'userinvalidcssjstitle', $wgTitle->getSkinFromCssJsSubpage() ) );
1415                                 }
1416                                 if ( $this->formtype !== 'preview' ) {
1417                                         if ( $this->isCssSubpage )
1418                                                 $wgOut->wrapWikiMsg( "<div id='mw-usercssyoucanpreview'>\n$1\n</div>", array( 'usercssyoucanpreview' ) );
1419                                         if ( $this->isJsSubpage )
1420                                                 $wgOut->wrapWikiMsg( "<div id='mw-userjsyoucanpreview'>\n$1\n</div>", array( 'userjsyoucanpreview' ) );
1421                                 }
1422                         }
1423                 }
1424
1425                 if ( $this->mTitle->getNamespace() != NS_MEDIAWIKI && $this->mTitle->isProtected( 'edit' ) ) {
1426                         # Is the title semi-protected?
1427                         if ( $this->mTitle->isSemiProtected() ) {
1428                                 $noticeMsg = 'semiprotectedpagewarning';
1429                         } else {
1430                                 # Then it must be protected based on static groups (regular)
1431                                 $noticeMsg = 'protectedpagewarning';
1432                         }
1433                         LogEventsList::showLogExtract( $wgOut, 'protect', $this->mTitle->getPrefixedText(), '',
1434                                 array( 'lim' => 1, 'msgKey' => array( $noticeMsg ) ) );
1435                 }
1436                 if ( $this->mTitle->isCascadeProtected() ) {
1437                         # Is this page under cascading protection from some source pages?
1438                         list($cascadeSources, /* $restrictions */) = $this->mTitle->getCascadeProtectionSources();
1439                         $notice = "<div class='mw-cascadeprotectedwarning'>\n$1\n";
1440                         $cascadeSourcesCount = count( $cascadeSources );
1441                         if ( $cascadeSourcesCount > 0 ) {
1442                                 # Explain, and list the titles responsible
1443                                 foreach( $cascadeSources as $page ) {
1444                                         $notice .= '* [[:' . $page->getPrefixedText() . "]]\n";
1445                                 }
1446                         }
1447                         $notice .= '</div>';
1448                         $wgOut->wrapWikiMsg( $notice, array( 'cascadeprotectedwarning', $cascadeSourcesCount ) );
1449                 }
1450                 if ( !$this->mTitle->exists() && $this->mTitle->getRestrictions( 'create' ) ) {
1451                         LogEventsList::showLogExtract( $wgOut, 'protect', $this->mTitle->getPrefixedText(), '',
1452                                 array(  'lim' => 1,
1453                                         'showIfEmpty' => false,
1454                                         'msgKey' => array( 'titleprotectedwarning' ),
1455                                         'wrap' => "<div class=\"mw-titleprotectedwarning\">\n$1</div>" ) );
1456                 }
1457
1458                 if ( $this->kblength === false ) {
1459                         $this->kblength = (int)( strlen( $this->textbox1 ) / 1024 );
1460                 }
1461
1462                 if ( $this->tooBig || $this->kblength > $wgMaxArticleSize ) {
1463                         $wgOut->addHTML( "<div class='error' id='mw-edit-longpageerror'>\n" );
1464                         $wgOut->addWikiMsg( 'longpageerror', $wgLang->formatNum( $this->kblength ), $wgLang->formatNum( $wgMaxArticleSize ) );
1465                         $wgOut->addHTML( "</div>\n" );
1466                 } elseif ( $this->kblength > 29 ) {
1467                         $wgOut->addHTML( "<div id='mw-edit-longpagewarning'>\n" );
1468                         $wgOut->addWikiMsg( 'longpagewarning', $wgLang->formatNum( $this->kblength ) );
1469                         $wgOut->addHTML( "</div>\n" );
1470                 }
1471         }
1472
1473         /**
1474          * Standard summary input and label (wgSummary), abstracted so EditPage
1475          * subclasses may reorganize the form.
1476          * Note that you do not need to worry about the label's for=, it will be
1477          * inferred by the id given to the input. You can remove them both by
1478          * passing array( 'id' => false ) to $userInputAttrs.
1479          *
1480          * @param $summary The value of the summary input
1481          * @param $labelText The html to place inside the label
1482          * @param $inputAttrs An array of attrs to use on the input
1483          * @param $spanLabelAttrs An array of attrs to use on the span inside the label
1484          *
1485          * @return array An array in the format array( $label, $input )
1486          */
1487         function getSummaryInput($summary = "", $labelText = null, $inputAttrs = null, $spanLabelAttrs = null) {
1488                 global $wgUser;
1489                 //Note: the maxlength is overriden in JS to 250 and to make it use UTF-8 bytes, not characters.
1490                 $inputAttrs = ( is_array($inputAttrs) ? $inputAttrs : array() ) + array(
1491                         'id' => 'wpSummary',
1492                         'maxlength' => '200',
1493                         'tabindex' => '1',
1494                         'size' => 60,
1495                         'spellcheck' => 'true',
1496                 ) + $wgUser->getSkin()->tooltipAndAccessKeyAttribs( 'summary' );
1497
1498                 $spanLabelAttrs = ( is_array($spanLabelAttrs) ? $spanLabelAttrs : array() ) + array(
1499                         'class' => $this->missingSummary ? 'mw-summarymissed' : 'mw-summary',
1500                         'id' => "wpSummaryLabel"
1501                 );
1502
1503                 $label = null;
1504                 if ( $labelText ) {
1505                         $label = Xml::tags( 'label', $inputAttrs['id'] ? array( 'for' => $inputAttrs['id'] ) : null, $labelText );
1506                         $label = Xml::tags( 'span', $spanLabelAttrs, $label );
1507                 }
1508
1509                 $input = Html::input( 'wpSummary', $summary, 'text', $inputAttrs );
1510
1511                 return array( $label, $input );
1512         }
1513
1514         /**
1515          * @param $isSubjectPreview Boolean: true if this is the section subject/title
1516          *                          up top, or false if this is the comment summary
1517          *                          down below the textarea
1518          * @param $summary String: The text of the summary to display
1519          * @return String
1520          */
1521         protected function showSummaryInput( $isSubjectPreview, $summary = "" ) {
1522                 global $wgOut, $wgContLang;
1523                 # Add a class if 'missingsummary' is triggered to allow styling of the summary line
1524                 $summaryClass = $this->missingSummary ? 'mw-summarymissed' : 'mw-summary';
1525                 if ( $isSubjectPreview ) {
1526                         if ( $this->nosummary )
1527                                 return;
1528                 } else {
1529                         if ( !$this->mShowSummaryField )
1530                                 return;
1531                 }
1532                 $summary = $wgContLang->recodeForEdit( $summary );
1533                 $labelText = wfMsgExt( $isSubjectPreview ? 'subject' : 'summary', 'parseinline' );
1534                 list($label, $input) = $this->getSummaryInput($summary, $labelText, array( 'class' => $summaryClass ), array());
1535                 $wgOut->addHTML("{$label} {$input}");
1536         }
1537
1538         /**
1539          * @param $isSubjectPreview Boolean: true if this is the section subject/title
1540          *                          up top, or false if this is the comment summary
1541          *                          down below the textarea
1542          * @param $summary String: the text of the summary to display
1543          * @return String
1544          */
1545         protected function getSummaryPreview( $isSubjectPreview, $summary = "" ) {
1546                 if ( !$summary || ( !$this->preview && !$this->diff ) )
1547                         return "";
1548
1549                 global $wgParser, $wgUser;
1550                 $sk = $wgUser->getSkin();
1551
1552                 if ( $isSubjectPreview )
1553                         $summary = wfMsgForContent( 'newsectionsummary', $wgParser->stripSectionName( $summary ) );
1554
1555                 $message = $isSubjectPreview ? 'subject-preview' : 'summary-preview';
1556
1557                 $summary = wfMsgExt( $message, 'parseinline' ) . $sk->commentBlock( $summary, $this->mTitle, $isSubjectPreview );
1558                 return Xml::tags( 'div', array( 'class' => 'mw-summary-preview' ), $summary );
1559         }
1560
1561         protected function showFormBeforeText() {
1562                 global $wgOut;
1563                 $section = htmlspecialchars( $this->section );
1564                 $wgOut->addHTML( <<<HTML
1565 <input type='hidden' value="{$section}" name="wpSection" />
1566 <input type='hidden' value="{$this->starttime}" name="wpStarttime" />
1567 <input type='hidden' value="{$this->edittime}" name="wpEdittime" />
1568 <input type='hidden' value="{$this->scrolltop}" name="wpScrolltop" id="wpScrolltop" />
1569
1570 HTML
1571                 );
1572                 if ( !$this->checkUnicodeCompliantBrowser() )
1573                         $wgOut->addHTML(Xml::hidden( 'safemode', '1' ));
1574         }
1575
1576         protected function showFormAfterText() {
1577                 global $wgOut, $wgUser;
1578                 /**
1579                  * To make it harder for someone to slip a user a page
1580                  * which submits an edit form to the wiki without their
1581                  * knowledge, a random token is associated with the login
1582                  * session. If it's not passed back with the submission,
1583                  * we won't save the page, or render user JavaScript and
1584                  * CSS previews.
1585                  *
1586                  * For anon editors, who may not have a session, we just
1587                  * include the constant suffix to prevent editing from
1588                  * broken text-mangling proxies.
1589                  */
1590                 $wgOut->addHTML( "\n" . Xml::hidden( "wpEditToken", $wgUser->editToken() ) . "\n" );
1591         }
1592
1593         /**
1594          * Subpage overridable method for printing the form for page content editing
1595          * By default this simply outputs wpTextbox1
1596          * Subclasses can override this to provide a custom UI for editing;
1597          * be it a form, or simply wpTextbox1 with a modified content that will be
1598          * reverse modified when extracted from the post data.
1599          * Note that this is basically the inverse for importContentFormData
1600          *
1601          * @param $request WebRequest
1602          */
1603         protected function showContentForm() {
1604                 $this->showTextbox1();
1605         }
1606
1607         /**
1608          * Method to output wpTextbox1
1609          * The $textoverride method can be used by subclasses overriding showContentForm
1610          * to pass back to this method.
1611          *
1612          * @param $customAttribs An array of html attributes to use in the textarea
1613          * @param $textoverride String: optional text to override $this->textarea1 with
1614          */
1615         protected function showTextbox1($customAttribs = null, $textoverride = null) {
1616                 $classes = array(); // Textarea CSS
1617                 if ( $this->mTitle->getNamespace() != NS_MEDIAWIKI && $this->mTitle->isProtected( 'edit' ) ) {
1618                         # Is the title semi-protected?
1619                         if ( $this->mTitle->isSemiProtected() ) {
1620                                 $classes[] = 'mw-textarea-sprotected';
1621                         } else {
1622                                 # Then it must be protected based on static groups (regular)
1623                                 $classes[] = 'mw-textarea-protected';
1624                         }
1625                 }
1626                 $attribs = array( 'tabindex' => 1 );
1627                 if ( is_array($customAttribs) )
1628                         $attribs += $customAttribs;
1629
1630                 if ( $this->wasDeletedSinceLastEdit() )
1631                         $attribs['type'] = 'hidden';
1632                 if ( !empty( $classes ) ) {
1633                         if ( isset($attribs['class']) )
1634                                 $classes[] = $attribs['class'];
1635                         $attribs['class'] = implode( ' ', $classes );
1636                 }
1637
1638                 $this->showTextbox( isset($textoverride) ? $textoverride : $this->textbox1, 'wpTextbox1', $attribs );
1639         }
1640
1641         protected function showTextbox2() {
1642                 $this->showTextbox( $this->textbox2, 'wpTextbox2', array( 'tabindex' => 6 ) );
1643         }
1644
1645         protected function showTextbox( $content, $name, $customAttribs = array() ) {
1646                 global $wgOut, $wgUser;
1647
1648                 $wikitext = $this->safeUnicodeOutput( $content );
1649                 if ( $wikitext !== '' ) {
1650                         // Ensure there's a newline at the end, otherwise adding lines
1651                         // is awkward.
1652                         // But don't add a newline if the ext is empty, or Firefox in XHTML
1653                         // mode will show an extra newline. A bit annoying.
1654                         $wikitext .= "\n";
1655                 }
1656
1657                 $attribs = $customAttribs + array(
1658                         'accesskey' => ',',
1659                         'id'   => $name,
1660                         'cols' => $wgUser->getIntOption( 'cols' ),
1661                         'rows' => $wgUser->getIntOption( 'rows' ),
1662                         'style' => '' // avoid php notices when appending preferences (appending allows customAttribs['style'] to still work
1663                 );
1664
1665                 $wgOut->addHTML( Html::textarea( $name, $wikitext, $attribs ) );
1666         }
1667
1668         protected function displayPreviewArea( $previewOutput, $isOnTop = false ) {
1669                 global $wgOut;
1670                 $classes = array();
1671                 if ( $isOnTop )
1672                         $classes[] = 'ontop';
1673
1674                 $attribs = array( 'id' => 'wikiPreview', 'class' => implode( ' ', $classes ) );
1675
1676                 if ( $this->formtype != 'preview' )
1677                         $attribs['style'] = 'display: none;';
1678
1679                 $wgOut->addHTML( Xml::openElement( 'div', $attribs ) );
1680
1681                 if ( $this->formtype == 'preview' ) {
1682                         $this->showPreview( $previewOutput );
1683                 }
1684
1685                 $wgOut->addHTML( '</div>' );
1686
1687                 if ( $this->formtype == 'diff') {
1688                         $this->showDiff();
1689                 }
1690         }
1691
1692         /**
1693          * Append preview output to $wgOut.
1694          * Includes category rendering if this is a category page.
1695          *
1696          * @param $text String: the HTML to be output for the preview.
1697          */
1698         protected function showPreview( $text ) {
1699                 global $wgOut;
1700                 if ( $this->mTitle->getNamespace() == NS_CATEGORY) {
1701                         $this->mArticle->openShowCategory();
1702                 }
1703                 # This hook seems slightly odd here, but makes things more
1704                 # consistent for extensions.
1705                 wfRunHooks( 'OutputPageBeforeHTML',array( &$wgOut, &$text ) );
1706                 $wgOut->addHTML( $text );
1707                 if ( $this->mTitle->getNamespace() == NS_CATEGORY ) {
1708                         $this->mArticle->closeShowCategory();
1709                 }
1710         }
1711
1712         /**
1713          * Give a chance for site and per-namespace customizations of
1714          * terms of service summary link that might exist separately
1715          * from the copyright notice.
1716          *
1717          * This will display between the save button and the edit tools,
1718          * so should remain short!
1719          */
1720         protected function showTosSummary() {
1721                 $msg = 'editpage-tos-summary';
1722                 wfRunHooks( 'EditPageTosSummary', array( $this->mTitle, &$msg ) );
1723                 $text = wfMsg( $msg );
1724                 if( !wfEmptyMsg( $msg, $text ) && $text !== '-' ) {
1725                         global $wgOut;
1726                         $wgOut->addHTML( '<div class="mw-tos-summary">' );
1727                         $wgOut->addWikiMsgArray( $msg, array() );
1728                         $wgOut->addHTML( '</div>' );
1729                 }
1730         }
1731
1732         protected function showEditTools() {
1733                 global $wgOut;
1734                 $wgOut->addHTML( '<div class="mw-editTools">' );
1735                 $wgOut->addWikiMsgArray( 'edittools', array(), array( 'content' ) );
1736                 $wgOut->addHTML( '</div>' );
1737         }
1738
1739         protected function getCopywarn() {
1740                 global $wgRightsText;
1741                 if ( $wgRightsText ) {
1742                         $copywarnMsg = array( 'copyrightwarning',
1743                                 '[[' . wfMsgForContent( 'copyrightpage' ) . ']]',
1744                                 $wgRightsText );
1745                 } else {
1746                         $copywarnMsg = array( 'copyrightwarning2',
1747                                 '[[' . wfMsgForContent( 'copyrightpage' ) . ']]' );
1748                 }
1749                 // Allow for site and per-namespace customization of contribution/copyright notice.
1750                 wfRunHooks( 'EditPageCopyrightWarning', array( $this->mTitle, &$copywarnMsg ) );
1751
1752                 return "<div id=\"editpage-copywarn\">\n" . call_user_func_array("wfMsgNoTrans", $copywarnMsg) . "\n</div>";
1753         }
1754
1755         protected function showStandardInputs( &$tabindex = 2 ) {
1756                 global $wgOut, $wgUser;
1757                 $wgOut->addHTML( "<div class='editOptions'>\n" );
1758
1759                 if ( $this->section != 'new' ) {
1760                         $this->showSummaryInput( false, $this->summary );
1761                         $wgOut->addHTML( $this->getSummaryPreview( false, $this->summary ) );
1762                 }
1763
1764                 $checkboxes = $this->getCheckboxes( $tabindex, $wgUser->getSkin(),
1765                         array( 'minor' => $this->minoredit, 'watch' => $this->watchthis ) );
1766                 $wgOut->addHTML( "<div class='editCheckboxes'>" . implode( $checkboxes, "\n" ) . "</div>\n" );
1767                 $wgOut->addHTML( "<div class='editButtons'>\n" );
1768                 $wgOut->addHTML( implode( $this->getEditButtons( $tabindex ), "\n" ) . "\n" );
1769
1770                 $cancel = $this->getCancelLink();
1771                 $separator = wfMsgExt( 'pipe-separator' , 'escapenoentities' );
1772                 $edithelpurl = Skin::makeInternalOrExternalUrl( wfMsgForContent( 'edithelppage' ) );
1773                 $edithelp = '<a target="helpwindow" href="'.$edithelpurl.'">'.
1774                         htmlspecialchars( wfMsg( 'edithelp' ) ).'</a> '.
1775                         htmlspecialchars( wfMsg( 'newwindow' ) );
1776                 $wgOut->addHTML( "      <span class='editHelp'>{$cancel}{$separator}{$edithelp}</span>\n" );
1777                 $wgOut->addHTML( "</div><!-- editButtons -->\n</div><!-- editOptions -->\n" );
1778         }
1779
1780         /*
1781          * Show an edit conflict. textbox1 is already shown in showEditForm().
1782          * If you want to use another entry point to this function, be careful.
1783          */
1784         protected function showConflict() {
1785                 global $wgOut;
1786                 $this->textbox2 = $this->textbox1;
1787                 $this->textbox1 = $this->getContent();
1788                 if ( wfRunHooks( 'EditPageBeforeConflictDiff', array( &$this, &$wgOut ) ) ) {
1789                         $wgOut->wrapWikiMsg( '<h2>$1</h2>', "yourdiff" );
1790
1791                         $de = new DifferenceEngine( $this->mTitle );
1792                         $de->setText( $this->textbox2, $this->textbox1 );
1793                         $de->showDiff( wfMsg( "yourtext" ), wfMsg( "storedversion" ) );
1794
1795                         $wgOut->wrapWikiMsg( '<h2>$1</h2>', "yourtext" );
1796                         $this->showTextbox2();
1797                 }
1798         }
1799
1800         protected function getLastDelete() {
1801                 $dbr = wfGetDB( DB_SLAVE );
1802                 $data = $dbr->selectRow(
1803                         array( 'logging', 'user' ),
1804                         array( 'log_type',
1805                                'log_action',
1806                                'log_timestamp',
1807                                'log_user',
1808                                'log_namespace',
1809                                'log_title',
1810                                'log_comment',
1811                                'log_params',
1812                                'log_deleted',
1813                                'user_name' ),
1814                         array( 'log_namespace' => $this->mTitle->getNamespace(),
1815                                'log_title' => $this->mTitle->getDBkey(),
1816                                'log_type' => 'delete',
1817                                'log_action' => 'delete',
1818                                'user_id=log_user' ),
1819                         __METHOD__,
1820                         array( 'LIMIT' => 1, 'ORDER BY' => 'log_timestamp DESC' )
1821                 );
1822                 // Quick paranoid permission checks...
1823                 if( is_object( $data ) ) {
1824                         if( $data->log_deleted & LogPage::DELETED_USER )
1825                                 $data->user_name = wfMsgHtml( 'rev-deleted-user' );
1826                         if( $data->log_deleted & LogPage::DELETED_COMMENT )
1827                                 $data->log_comment = wfMsgHtml( 'rev-deleted-comment' );
1828                 }
1829                 return $data;
1830         }
1831
1832         /**
1833          * Get the rendered text for previewing.
1834          * @return string
1835          */
1836         function getPreviewText() {
1837                 global $wgOut, $wgUser, $wgParser, $wgMessageCache;
1838
1839                 wfProfileIn( __METHOD__ );
1840
1841                 if ( $this->mTriedSave && !$this->mTokenOk ) {
1842                         if ( $this->mTokenOkExceptSuffix ) {
1843                                 $note = wfMsg( 'token_suffix_mismatch' );
1844                         } else {
1845                                 $note = wfMsg( 'session_fail_preview' );
1846                         }
1847                 } else {
1848                         $note = wfMsg( 'previewnote' );
1849                 }
1850
1851                 $parserOptions = ParserOptions::newFromUser( $wgUser );
1852                 $parserOptions->setEditSection( false );
1853                 $parserOptions->setIsPreview( true );
1854                 $parserOptions->setIsSectionPreview( !is_null($this->section) && $this->section !== '' );
1855
1856                 global $wgRawHtml;
1857                 if ( $wgRawHtml && !$this->mTokenOk ) {
1858                         // Could be an offsite preview attempt. This is very unsafe if
1859                         // HTML is enabled, as it could be an attack.
1860                         return $wgOut->parse( "<div class='previewnote'>" .
1861                                 wfMsg( 'session_fail_preview_html' ) . "</div>" );
1862                 }
1863
1864                 # don't parse user css/js, show message about preview
1865                 # XXX: stupid php bug won't let us use $wgTitle->isCssJsSubpage() here
1866
1867                 if ( $this->isCssJsSubpage ) {
1868                         if (preg_match( "/\\.css$/", $this->mTitle->getText() ) ) {
1869                                 $previewtext = "<div id='mw-usercsspreview'>\n" . wfMsg( 'usercsspreview' ) . "\n</div>";
1870                         } else if (preg_match( "/\\.js$/", $this->mTitle->getText() ) ) {
1871                                 $previewtext = "<div id='mw-userjspreview'>\n" . wfMsg( 'userjspreview' ) . "\n</div>";
1872                         }
1873                         $parserOptions->setTidy( true );
1874                         $parserOutput = $wgParser->parse( $previewtext, $this->mTitle, $parserOptions );
1875                         $previewHTML = $parserOutput->mText;
1876                 } elseif ( $rt = Title::newFromRedirectArray( $this->textbox1 ) ) {
1877                         $previewHTML = $this->mArticle->viewRedirect( $rt, false );
1878                 } else {
1879                         $toparse = $this->textbox1;
1880
1881                         # If we're adding a comment, we need to show the
1882                         # summary as the headline
1883                         if ( $this->section == "new" && $this->summary != "" ) {
1884                                 $toparse = "== {$this->summary} ==\n\n" . $toparse;
1885                         }
1886
1887                         wfRunHooks( 'EditPageGetPreviewText', array( $this, &$toparse ) );
1888
1889                         // Parse mediawiki messages with correct target language
1890                         if ( $this->mTitle->getNamespace() == NS_MEDIAWIKI ) {
1891                                 list( /* $unused */, $lang ) = $wgMessageCache->figureMessage( $this->mTitle->getText() );
1892                                 $obj = wfGetLangObj( $lang );
1893                                 $parserOptions->setTargetLanguage( $obj );
1894                         }
1895
1896
1897                         $parserOptions->setTidy( true );
1898                         $parserOptions->enableLimitReport();
1899                         $parserOutput = $wgParser->parse( $this->mArticle->preSaveTransform( $toparse ),
1900                                         $this->mTitle, $parserOptions );
1901
1902                         $previewHTML = $parserOutput->getText();
1903                         $this->mParserOutput = $parserOutput;
1904                         $wgOut->addParserOutputNoText( $parserOutput );
1905
1906                         if ( count( $parserOutput->getWarnings() ) ) {
1907                                 $note .= "\n\n" . implode( "\n\n", $parserOutput->getWarnings() );
1908                         }
1909                 }
1910
1911                 if( $this->isConflict ) {
1912                         $conflict = '<h2 id="mw-previewconflict">' . htmlspecialchars( wfMsg( 'previewconflict' ) ) . "</h2>\n";
1913                 } else {
1914                         $conflict = '<hr />';
1915                 }
1916
1917                 $previewhead = "<div class='previewnote'>\n" .
1918                         '<h2 id="mw-previewheader">' . htmlspecialchars( wfMsg( 'preview' ) ) . "</h2>" .
1919                         $wgOut->parse( $note ) . $conflict . "</div>\n";
1920
1921                 wfProfileOut( __METHOD__ );
1922                 return $previewhead . $previewHTML . $this->previewTextAfterContent;
1923         }
1924
1925         function getTemplates() {
1926                 if ( $this->preview || $this->section != '' ) {
1927                         $templates = array();
1928                         if ( !isset( $this->mParserOutput ) ) return $templates;
1929                         foreach( $this->mParserOutput->getTemplates() as $ns => $template) {
1930                                 foreach( array_keys( $template ) as $dbk ) {
1931                                         $templates[] = Title::makeTitle($ns, $dbk);
1932                                 }
1933                         }
1934                         return $templates;
1935                 } else {
1936                         return $this->mArticle->getUsedTemplates();
1937                 }
1938         }
1939
1940         /**
1941          * Call the stock "user is blocked" page
1942          */
1943         function blockedPage() {
1944                 global $wgOut;
1945                 $wgOut->blockedPage( false ); # Standard block notice on the top, don't 'return'
1946
1947                 # If the user made changes, preserve them when showing the markup
1948                 # (This happens when a user is blocked during edit, for instance)
1949                 $first = $this->firsttime || ( !$this->save && $this->textbox1 == '' );
1950                 if ( $first ) {
1951                         $source = $this->mTitle->exists() ? $this->getContent() : false;
1952                 } else {
1953                         $source = $this->textbox1;
1954                 }
1955
1956                 # Spit out the source or the user's modified version
1957                 if ( $source !== false ) {
1958                         $wgOut->addHTML( '<hr />' );
1959                         $wgOut->addWikiMsg( $first ? 'blockedoriginalsource' : 'blockededitsource', $this->mTitle->getPrefixedText() );
1960                         $this->showTextbox1( array( 'readonly' ), $source );
1961                 }
1962         }
1963
1964         /**
1965          * Produce the stock "please login to edit pages" page
1966          */
1967         function userNotLoggedInPage() {
1968                 global $wgUser, $wgOut, $wgTitle;
1969                 $skin = $wgUser->getSkin();
1970
1971                 $loginTitle = SpecialPage::getTitleFor( 'Userlogin' );
1972                 $loginLink = $skin->link(
1973                         $loginTitle,
1974                         wfMsgHtml( 'loginreqlink' ),
1975                         array(),
1976                         array( 'returnto' => $wgTitle->getPrefixedText() ),
1977                         array( 'known', 'noclasses' )
1978                 );
1979
1980                 $wgOut->setPageTitle( wfMsg( 'whitelistedittitle' ) );
1981                 $wgOut->setRobotPolicy( 'noindex,nofollow' );
1982                 $wgOut->setArticleRelated( false );
1983
1984                 $wgOut->addHTML( wfMsgWikiHtml( 'whitelistedittext', $loginLink ) );
1985                 $wgOut->returnToMain( false, $wgTitle );
1986         }
1987
1988         /**
1989          * Creates a basic error page which informs the user that
1990          * they have attempted to edit a nonexistent section.
1991          */
1992         function noSuchSectionPage() {
1993                 global $wgOut;
1994
1995                 $wgOut->setPageTitle( wfMsg( 'nosuchsectiontitle' ) );
1996                 $wgOut->setRobotPolicy( 'noindex,nofollow' );
1997                 $wgOut->setArticleRelated( false );
1998
1999                 $res = wfMsgExt( 'nosuchsectiontext', 'parse', $this->section );
2000                 wfRunHooks( 'EditPageNoSuchSection', array( &$this, &$res ) );
2001                 $wgOut->addHTML( $res );
2002
2003                 $wgOut->returnToMain( false, $this->mTitle );
2004         }
2005
2006         /**
2007          * Produce the stock "your edit contains spam" page
2008          *
2009          * @param $match Text which triggered one or more filters
2010          */
2011         static function spamPage( $match = false ) {
2012                 global $wgOut, $wgTitle;
2013
2014                 $wgOut->setPageTitle( wfMsg( 'spamprotectiontitle' ) );
2015                 $wgOut->setRobotPolicy( 'noindex,nofollow' );
2016                 $wgOut->setArticleRelated( false );
2017
2018                 $wgOut->addHTML( '<div id="spamprotected">' );
2019                 $wgOut->addWikiMsg( 'spamprotectiontext' );
2020                 if ( $match ) {
2021                         $wgOut->addWikiMsg( 'spamprotectionmatch', wfEscapeWikiText( $match ) );
2022                 }
2023                 $wgOut->addHTML( '</div>' );
2024
2025                 $wgOut->returnToMain( false, $wgTitle );
2026         }
2027
2028         /**
2029          * @private
2030          * @todo document
2031          */
2032         function mergeChangesInto( &$editText ){
2033                 wfProfileIn( __METHOD__ );
2034
2035                 $db = wfGetDB( DB_MASTER );
2036
2037                 // This is the revision the editor started from
2038                 $baseRevision = $this->getBaseRevision();
2039                 if ( is_null( $baseRevision ) ) {
2040                         wfProfileOut( __METHOD__ );
2041                         return false;
2042                 }
2043                 $baseText = $baseRevision->getText();
2044
2045                 // The current state, we want to merge updates into it
2046                 $currentRevision = Revision::loadFromTitle( $db, $this->mTitle );
2047                 if ( is_null( $currentRevision ) ) {
2048                         wfProfileOut( __METHOD__ );
2049                         return false;
2050                 }
2051                 $currentText = $currentRevision->getText();
2052
2053                 $result = '';
2054                 if ( wfMerge( $baseText, $editText, $currentText, $result ) ) {
2055                         $editText = $result;
2056                         wfProfileOut( __METHOD__ );
2057                         return true;
2058                 } else {
2059                         wfProfileOut( __METHOD__ );
2060                         return false;
2061                 }
2062         }
2063
2064         /**
2065          * Check if the browser is on a blacklist of user-agents known to
2066          * mangle UTF-8 data on form submission. Returns true if Unicode
2067          * should make it through, false if it's known to be a problem.
2068          * @return bool
2069          * @private
2070          */
2071         function checkUnicodeCompliantBrowser() {
2072                 global $wgBrowserBlackList;
2073                 if ( empty( $_SERVER["HTTP_USER_AGENT"] ) ) {
2074                         // No User-Agent header sent? Trust it by default...
2075                         return true;
2076                 }
2077                 $currentbrowser = $_SERVER["HTTP_USER_AGENT"];
2078                 foreach ( $wgBrowserBlackList as $browser ) {
2079                         if ( preg_match($browser, $currentbrowser) ) {
2080                                 return false;
2081                         }
2082                 }
2083                 return true;
2084         }
2085
2086         /**
2087          * @deprecated use $wgParser->stripSectionName()
2088          */
2089         function pseudoParseSectionAnchor( $text ) {
2090                 global $wgParser;
2091                 return $wgParser->stripSectionName( $text );
2092         }
2093
2094         /**
2095          * Format an anchor fragment as it would appear for a given section name
2096          * @param $text String
2097          * @return String
2098          * @private
2099          */
2100         function sectionAnchor( $text ) {
2101                 global $wgParser;
2102                 return $wgParser->guessSectionNameFromWikiText( $text );
2103         }
2104
2105         /**
2106          * Shows a bulletin board style toolbar for common editing functions.
2107          * It can be disabled in the user preferences.
2108          * The necessary JavaScript code can be found in skins/common/edit.js.
2109          *
2110          * @return string
2111          */
2112         static function getEditToolbar() {
2113                 global $wgStylePath, $wgContLang, $wgLang, $wgOut;
2114
2115                 /**
2116
2117                  * toolarray an array of arrays which each include the filename of
2118                  * the button image (without path), the opening tag, the closing tag,
2119                  * and optionally a sample text that is inserted between the two when no
2120                  * selection is highlighted.
2121                  * The tip text is shown when the user moves the mouse over the button.
2122                  *
2123                  * Already here are accesskeys (key), which are not used yet until someone
2124                  * can figure out a way to make them work in IE. However, we should make
2125                  * sure these keys are not defined on the edit page.
2126                  */
2127                 $toolarray = array(
2128                         array(
2129                                 'image'  => $wgLang->getImageFile( 'button-bold' ),
2130                                 'id'     => 'mw-editbutton-bold',
2131                                 'open'   => '\'\'\'',
2132                                 'close'  => '\'\'\'',
2133                                 'sample' => wfMsg( 'bold_sample' ),
2134                                 'tip'    => wfMsg( 'bold_tip' ),
2135                                 'key'    => 'B'
2136                         ),
2137                         array(
2138                                 'image'  => $wgLang->getImageFile( 'button-italic' ),
2139                                 'id'     => 'mw-editbutton-italic',
2140                                 'open'   => '\'\'',
2141                                 'close'  => '\'\'',
2142                                 'sample' => wfMsg( 'italic_sample' ),
2143                                 'tip'    => wfMsg( 'italic_tip' ),
2144                                 'key'    => 'I'
2145                         ),
2146                         array(
2147                                 'image'  => $wgLang->getImageFile( 'button-link' ),
2148                                 'id'     => 'mw-editbutton-link',
2149                                 'open'   => '[[',
2150                                 'close'  => ']]',
2151                                 'sample' => wfMsg( 'link_sample' ),
2152                                 'tip'    => wfMsg( 'link_tip' ),
2153                                 'key'    => 'L'
2154                         ),
2155                         array(
2156                                 'image'  => $wgLang->getImageFile( 'button-extlink' ),
2157                                 'id'     => 'mw-editbutton-extlink',
2158                                 'open'   => '[',
2159                                 'close'  => ']',
2160                                 'sample' => wfMsg( 'extlink_sample' ),
2161                                 'tip'    => wfMsg( 'extlink_tip' ),
2162                                 'key'    => 'X'
2163                         ),
2164                         array(
2165                                 'image'  => $wgLang->getImageFile( 'button-headline' ),
2166                                 'id'     => 'mw-editbutton-headline',
2167                                 'open'   => "\n== ",
2168                                 'close'  => " ==\n",
2169                                 'sample' => wfMsg( 'headline_sample' ),
2170                                 'tip'    => wfMsg( 'headline_tip' ),
2171                                 'key'    => 'H'
2172                         ),
2173                         array(
2174                                 'image'  => $wgLang->getImageFile( 'button-image' ),
2175                                 'id'     => 'mw-editbutton-image',
2176                                 'open'   => '[[' . $wgContLang->getNsText( NS_FILE ) . ':',
2177                                 'close'  => ']]',
2178                                 'sample' => wfMsg( 'image_sample' ),
2179                                 'tip'    => wfMsg( 'image_tip' ),
2180                                 'key'    => 'D'
2181                         ),
2182                         array(
2183                                 'image'  => $wgLang->getImageFile( 'button-media' ),
2184                                 'id'     => 'mw-editbutton-media',
2185                                 'open'   => '[[' . $wgContLang->getNsText( NS_MEDIA ) . ':',
2186                                 'close'  => ']]',
2187                                 'sample' => wfMsg( 'media_sample' ),
2188                                 'tip'    => wfMsg( 'media_tip' ),
2189                                 'key'    => 'M'
2190                         ),
2191                         array(
2192                                 'image'  => $wgLang->getImageFile( 'button-math' ),
2193                                 'id'     => 'mw-editbutton-math',
2194                                 'open'   => "<math>",
2195                                 'close'  => "</math>",
2196                                 'sample' => wfMsg( 'math_sample' ),
2197                                 'tip'    => wfMsg( 'math_tip' ),
2198                                 'key'    => 'C'
2199                         ),
2200                         array(
2201                                 'image'  => $wgLang->getImageFile( 'button-nowiki' ),
2202                                 'id'     => 'mw-editbutton-nowiki',
2203                                 'open'   => "<nowiki>",
2204                                 'close'  => "</nowiki>",
2205                                 'sample' => wfMsg( 'nowiki_sample' ),
2206                                 'tip'    => wfMsg( 'nowiki_tip' ),
2207                                 'key'    => 'N'
2208                         ),
2209                         array(
2210                                 'image'  => $wgLang->getImageFile( 'button-sig' ),
2211                                 'id'     => 'mw-editbutton-signature',
2212                                 'open'   => '--~~~~',
2213                                 'close'  => '',
2214                                 'sample' => '',
2215                                 'tip'    => wfMsg( 'sig_tip' ),
2216                                 'key'    => 'Y'
2217                         ),
2218                         array(
2219                                 'image'  => $wgLang->getImageFile( 'button-hr' ),
2220                                 'id'     => 'mw-editbutton-hr',
2221                                 'open'   => "\n----\n",
2222                                 'close'  => '',
2223                                 'sample' => '',
2224                                 'tip'    => wfMsg( 'hr_tip' ),
2225                                 'key'    => 'R'
2226                         )
2227                 );
2228                 $toolbar = "<div id='toolbar'>\n";
2229
2230                 $script = '';
2231                 foreach ( $toolarray as $tool ) {
2232                         $params = array(
2233                                 $image = $wgStylePath . '/common/images/' . $tool['image'],
2234                                 // Note that we use the tip both for the ALT tag and the TITLE tag of the image.
2235                                 // Older browsers show a "speedtip" type message only for ALT.
2236                                 // Ideally these should be different, realistically they
2237                                 // probably don't need to be.
2238                                 $tip = $tool['tip'],
2239                                 $open = $tool['open'],
2240                                 $close = $tool['close'],
2241                                 $sample = $tool['sample'],
2242                                 $cssId = $tool['id'],
2243                         );
2244
2245                         $paramList = implode( ',',
2246                                 array_map( array( 'Xml', 'encodeJsVar' ), $params ) );
2247                         $script .= "addButton($paramList);\n";
2248                 }
2249
2250                 $wgOut->addScript( Html::inlineScript(
2251                         "if ( window.mediaWiki ) { $script }"
2252                 ) );
2253
2254                 $toolbar .= "\n</div>";
2255
2256                 wfRunHooks( 'EditPageBeforeEditToolbar', array( &$toolbar ) );
2257
2258                 return $toolbar;
2259         }
2260
2261         /**
2262          * Returns an array of html code of the following checkboxes:
2263          * minor and watch
2264          *
2265          * @param $tabindex Current tabindex
2266          * @param $skin Skin object
2267          * @param $checked Array of checkbox => bool, where bool indicates the checked
2268          *                 status of the checkbox
2269          *
2270          * @return array
2271          */
2272         public function getCheckboxes( &$tabindex, $skin, $checked ) {
2273                 global $wgUser;
2274
2275                 $checkboxes = array();
2276
2277                 $checkboxes['minor'] = '';
2278                 $minorLabel = wfMsgExt( 'minoredit', array( 'parseinline' ) );
2279                 if ( $wgUser->isAllowed( 'minoredit' ) ) {
2280                         $attribs = array(
2281                                 'tabindex'  => ++$tabindex,
2282                                 'accesskey' => wfMsg( 'accesskey-minoredit' ),
2283                                 'id'        => 'wpMinoredit',
2284                         );
2285                         $checkboxes['minor'] =
2286                                 Xml::check( 'wpMinoredit', $checked['minor'], $attribs ) .
2287                                 "&#160;<label for='wpMinoredit' id='mw-editpage-minoredit'" . $skin->tooltip( 'minoredit', 'withaccess' ) . ">{$minorLabel}</label>";
2288                 }
2289
2290                 $watchLabel = wfMsgExt( 'watchthis', array( 'parseinline' ) );
2291                 $checkboxes['watch'] = '';
2292                 if ( $wgUser->isLoggedIn() ) {
2293                         $attribs = array(
2294                                 'tabindex'  => ++$tabindex,
2295                                 'accesskey' => wfMsg( 'accesskey-watch' ),
2296                                 'id'        => 'wpWatchthis',
2297                         );
2298                         $checkboxes['watch'] =
2299                                 Xml::check( 'wpWatchthis', $checked['watch'], $attribs ) .
2300                                 "&#160;<label for='wpWatchthis' id='mw-editpage-watch'" . $skin->tooltip( 'watch', 'withaccess' ) . ">{$watchLabel}</label>";
2301                 }
2302                 wfRunHooks( 'EditPageBeforeEditChecks', array( &$this, &$checkboxes, &$tabindex ) );
2303                 return $checkboxes;
2304         }
2305
2306         /**
2307          * Returns an array of html code of the following buttons:
2308          * save, diff, preview and live
2309          *
2310          * @param $tabindex Current tabindex
2311          *
2312          * @return array
2313          */
2314         public function getEditButtons(&$tabindex) {
2315                 $buttons = array();
2316
2317                 $temp = array(
2318                         'id'        => 'wpSave',
2319                         'name'      => 'wpSave',
2320                         'type'      => 'submit',
2321                         'tabindex'  => ++$tabindex,
2322                         'value'     => wfMsg( 'savearticle' ),
2323                         'accesskey' => wfMsg( 'accesskey-save' ),
2324                         'title'     => wfMsg( 'tooltip-save' ).' ['.wfMsg( 'accesskey-save' ).']',
2325                 );
2326                 $buttons['save'] = Xml::element('input', $temp, '');
2327
2328                 ++$tabindex; // use the same for preview and live preview
2329                 $temp = array(
2330                         'id'        => 'wpPreview',
2331                         'name'      => 'wpPreview',
2332                         'type'      => 'submit',
2333                         'tabindex'  => $tabindex,
2334                         'value'     => wfMsg( 'showpreview' ),
2335                         'accesskey' => wfMsg( 'accesskey-preview' ),
2336                         'title'     => wfMsg( 'tooltip-preview' ) . ' [' . wfMsg( 'accesskey-preview' ) . ']',
2337                 );
2338                 $buttons['preview'] = Xml::element( 'input', $temp, '' );
2339                 $buttons['live'] = '';
2340
2341                 $temp = array(
2342                         'id'        => 'wpDiff',
2343                         'name'      => 'wpDiff',
2344                         'type'      => 'submit',
2345                         'tabindex'  => ++$tabindex,
2346                         'value'     => wfMsg( 'showdiff' ),
2347                         'accesskey' => wfMsg( 'accesskey-diff' ),
2348                         'title'     => wfMsg( 'tooltip-diff' ) . ' [' . wfMsg( 'accesskey-diff' ) . ']',
2349                 );
2350                 $buttons['diff'] = Xml::element( 'input', $temp, '' );
2351
2352                 wfRunHooks( 'EditPageBeforeEditButtons', array( &$this, &$buttons, &$tabindex ) );
2353                 return $buttons;
2354         }
2355
2356         /**
2357          * Output preview text only. This can be sucked into the edit page
2358          * via JavaScript, and saves the server time rendering the skin as
2359          * well as theoretically being more robust on the client (doesn't
2360          * disturb the edit box's undo history, won't eat your text on
2361          * failure, etc).
2362          *
2363          * @todo This doesn't include category or interlanguage links.
2364          *       Would need to enhance it a bit, <s>maybe wrap them in XML
2365          *       or something...</s> that might also require more skin
2366          *       initialization, so check whether that's a problem.
2367          */
2368         function livePreview() {
2369                 global $wgOut;
2370                 $wgOut->disable();
2371                 header( 'Content-type: text/xml; charset=utf-8' );
2372                 header( 'Cache-control: no-cache' );
2373
2374                 $previewText = $this->getPreviewText();
2375                 #$categories = $skin->getCategoryLinks();
2376
2377                 $s =
2378                 '<?xml version="1.0" encoding="UTF-8" ?>' . "\n" .
2379                 Xml::tags( 'livepreview', null,
2380                         Xml::element( 'preview', null, $previewText )
2381                         #.      Xml::element( 'category', null, $categories )
2382                 );
2383                 echo $s;
2384         }
2385
2386
2387         public function getCancelLink() {
2388                 global $wgUser, $wgTitle;
2389
2390                 $cancelParams = array();
2391                 if ( !$this->isConflict && $this->mArticle->getOldID() > 0 ) {
2392                         $cancelParams['oldid'] = $this->mArticle->getOldID();
2393                 }
2394
2395                 return $wgUser->getSkin()->link(
2396                         $wgTitle,
2397                         wfMsgExt( 'cancel', array( 'parseinline' ) ),
2398                         array( 'id' => 'mw-editform-cancel' ),
2399                         $cancelParams,
2400                         array( 'known', 'noclasses' )
2401                 );
2402         }
2403
2404         /**
2405          * Get a diff between the current contents of the edit box and the
2406          * version of the page we're editing from.
2407          *
2408          * If this is a section edit, we'll replace the section as for final
2409          * save and then make a comparison.
2410          */
2411         function showDiff() {
2412                 $oldtext = $this->mArticle->fetchContent();
2413                 $newtext = $this->mArticle->replaceSection(
2414                         $this->section, $this->textbox1, $this->summary, $this->edittime );
2415
2416                 wfRunHooks( 'EditPageGetDiffText', array( $this, &$newtext ) );
2417
2418                 $newtext = $this->mArticle->preSaveTransform( $newtext );
2419                 $oldtitle = wfMsgExt( 'currentrev', array( 'parseinline' ) );
2420                 $newtitle = wfMsgExt( 'yourtext', array( 'parseinline' ) );
2421                 if ( $oldtext !== false  || $newtext != '' ) {
2422                         $de = new DifferenceEngine( $this->mTitle );
2423                         $de->setText( $oldtext, $newtext );
2424                         $difftext = $de->getDiff( $oldtitle, $newtitle );
2425                         $de->showDiffStyle();
2426                 } else {
2427                         $difftext = '';
2428                 }
2429
2430                 global $wgOut;
2431                 $wgOut->addHTML( '<div id="wikiDiff">' . $difftext . '</div>' );
2432         }
2433
2434         /**
2435          * Filter an input field through a Unicode de-armoring process if it
2436          * came from an old browser with known broken Unicode editing issues.
2437          *
2438          * @param $request WebRequest
2439          * @param $field String
2440          * @return String
2441          * @private
2442          */
2443         function safeUnicodeInput( $request, $field ) {
2444                 $text = rtrim( $request->getText( $field ) );
2445                 return $request->getBool( 'safemode' )
2446                         ? $this->unmakesafe( $text )
2447                         : $text;
2448         }
2449
2450         function safeUnicodeText( $request, $text ) {
2451                 $text = rtrim( $text );
2452                 return $request->getBool( 'safemode' )
2453                         ? $this->unmakesafe( $text )
2454                         : $text;
2455         }
2456
2457         /**
2458          * Filter an output field through a Unicode armoring process if it is
2459          * going to an old browser with known broken Unicode editing issues.
2460          *
2461          * @param $text String
2462          * @return String
2463          * @private
2464          */
2465         function safeUnicodeOutput( $text ) {
2466                 global $wgContLang;
2467                 $codedText = $wgContLang->recodeForEdit( $text );
2468                 return $this->checkUnicodeCompliantBrowser()
2469                         ? $codedText
2470                         : $this->makesafe( $codedText );
2471         }
2472
2473         /**
2474          * A number of web browsers are known to corrupt non-ASCII characters
2475          * in a UTF-8 text editing environment. To protect against this,
2476          * detected browsers will be served an armored version of the text,
2477          * with non-ASCII chars converted to numeric HTML character references.
2478          *
2479          * Preexisting such character references will have a 0 added to them
2480          * to ensure that round-trips do not alter the original data.
2481          *
2482          * @param $invalue String
2483          * @return String
2484          * @private
2485          */
2486         function makesafe( $invalue ) {
2487                 // Armor existing references for reversability.
2488                 $invalue = strtr( $invalue, array( "&#x" => "&#x0" ) );
2489
2490                 $bytesleft = 0;
2491                 $result = "";
2492                 $working = 0;
2493                 for( $i = 0; $i < strlen( $invalue ); $i++ ) {
2494                         $bytevalue = ord( $invalue{$i} );
2495                         if ( $bytevalue <= 0x7F ) { //0xxx xxxx
2496                                 $result .= chr( $bytevalue );
2497                                 $bytesleft = 0;
2498                         } elseif ( $bytevalue <= 0xBF ) { //10xx xxxx
2499                                 $working = $working << 6;
2500                                 $working += ($bytevalue & 0x3F);
2501                                 $bytesleft--;
2502                                 if ( $bytesleft <= 0 ) {
2503                                         $result .= "&#x" . strtoupper( dechex( $working ) ) . ";";
2504                                 }
2505                         } elseif ( $bytevalue <= 0xDF ) { //110x xxxx
2506                                 $working = $bytevalue & 0x1F;
2507                                 $bytesleft = 1;
2508                         } elseif ( $bytevalue <= 0xEF ) { //1110 xxxx
2509                                 $working = $bytevalue & 0x0F;
2510                                 $bytesleft = 2;
2511                         } else { //1111 0xxx
2512                                 $working = $bytevalue & 0x07;
2513                                 $bytesleft = 3;
2514                         }
2515                 }
2516                 return $result;
2517         }
2518
2519         /**
2520          * Reverse the previously applied transliteration of non-ASCII characters
2521          * back to UTF-8. Used to protect data from corruption by broken web browsers
2522          * as listed in $wgBrowserBlackList.
2523          *
2524          * @param $invalue String
2525          * @return String
2526          * @private
2527          */
2528         function unmakesafe( $invalue ) {
2529                 $result = "";
2530                 for( $i = 0; $i < strlen( $invalue ); $i++ ) {
2531                         if ( ( substr( $invalue, $i, 3 ) == "&#x" ) && ( $invalue{$i+3} != '0' ) ) {
2532                                 $i += 3;
2533                                 $hexstring = "";
2534                                 do {
2535                                         $hexstring .= $invalue{$i};
2536                                         $i++;
2537                                 } while( ctype_xdigit( $invalue{$i} ) && ( $i < strlen( $invalue ) ) );
2538
2539                                 // Do some sanity checks. These aren't needed for reversability,
2540                                 // but should help keep the breakage down if the editor
2541                                 // breaks one of the entities whilst editing.
2542                                 if ( (substr($invalue,$i,1)==";") and (strlen($hexstring) <= 6) ) {
2543                                         $codepoint = hexdec($hexstring);
2544                                         $result .= codepointToUtf8( $codepoint );
2545                                 } else {
2546                                         $result .= "&#x" . $hexstring . substr( $invalue, $i, 1 );
2547                                 }
2548                         } else {
2549                                 $result .= substr( $invalue, $i, 1 );
2550                         }
2551                 }
2552                 // reverse the transform that we made for reversability reasons.
2553                 return strtr( $result, array( "&#x0" => "&#x" ) );
2554         }
2555
2556         function noCreatePermission() {
2557                 global $wgOut;
2558                 $wgOut->setPageTitle( wfMsg( 'nocreatetitle' ) );
2559                 $wgOut->addWikiMsg( 'nocreatetext' );
2560         }
2561
2562         /**
2563          * Attempt submission
2564          * @return bool false if output is done, true if the rest of the form should be displayed
2565          */
2566         function attemptSave() {
2567                 global $wgUser, $wgOut, $wgTitle;
2568
2569                 $resultDetails = false;
2570                 # Allow bots to exempt some edits from bot flagging
2571                 $bot = $wgUser->isAllowed( 'bot' ) && $this->bot;
2572                 $value = $this->internalAttemptSave( $resultDetails, $bot );
2573
2574                 if ( $value == self::AS_SUCCESS_UPDATE || $value == self::AS_SUCCESS_NEW_ARTICLE ) {
2575                         $this->didSave = true;
2576                 }
2577
2578                 switch ( $value ) {
2579                         case self::AS_HOOK_ERROR_EXPECTED:
2580                         case self::AS_CONTENT_TOO_BIG:
2581                         case self::AS_ARTICLE_WAS_DELETED:
2582                         case self::AS_CONFLICT_DETECTED:
2583                         case self::AS_SUMMARY_NEEDED:
2584                         case self::AS_TEXTBOX_EMPTY:
2585                         case self::AS_MAX_ARTICLE_SIZE_EXCEEDED:
2586                         case self::AS_END:
2587                                 return true;
2588
2589                         case self::AS_HOOK_ERROR:
2590                         case self::AS_FILTERING:
2591                         case self::AS_SUCCESS_NEW_ARTICLE:
2592                         case self::AS_SUCCESS_UPDATE:
2593                                 return false;
2594
2595                         case self::AS_SPAM_ERROR:
2596                                 self::spamPage( $resultDetails['spam'] );
2597                                 return false;
2598
2599                         case self::AS_BLOCKED_PAGE_FOR_USER:
2600                                 $this->blockedPage();
2601                                 return false;
2602
2603                         case self::AS_IMAGE_REDIRECT_ANON:
2604                                 $wgOut->showErrorPage( 'uploadnologin', 'uploadnologintext' );
2605                                 return false;
2606
2607                         case self::AS_READ_ONLY_PAGE_ANON:
2608                                 $this->userNotLoggedInPage();
2609                                 return false;
2610
2611                         case self::AS_READ_ONLY_PAGE_LOGGED:
2612                         case self::AS_READ_ONLY_PAGE:
2613                                 $wgOut->readOnlyPage();
2614                                 return false;
2615
2616                         case self::AS_RATE_LIMITED:
2617                                 $wgOut->rateLimited();
2618                                 return false;
2619
2620                         case self::AS_NO_CREATE_PERMISSION:
2621                                 $this->noCreatePermission();
2622                                 return;
2623
2624                         case self::AS_BLANK_ARTICLE:
2625                                 $wgOut->redirect( $wgTitle->getFullURL() );
2626                                 return false;
2627
2628                         case self::AS_IMAGE_REDIRECT_LOGGED:
2629                                 $wgOut->permissionRequired( 'upload' );
2630                                 return false;
2631                 }
2632         }
2633
2634         function getBaseRevision() {
2635                 if ( !$this->mBaseRevision ) {
2636                         $db = wfGetDB( DB_MASTER );
2637                         $baseRevision = Revision::loadFromTimestamp(
2638                                 $db, $this->mTitle, $this->edittime );
2639                         return $this->mBaseRevision = $baseRevision;
2640                 } else {
2641                         return $this->mBaseRevision;
2642                 }
2643         }
2644 }