* Markup anality: escape </ as <\/ in toolbar javascript for pure correctness under...
[lhc/web/wiklou.git] / includes / EditPage.php
1 <?php
2 /**
3 * Contain the EditPage class
4 * @package MediaWiki
5 */
6
7 /**
8 * Splitting edit page/HTML interface from Article...
9 * The actual database and text munging is still in Article,
10 * but it should get easier to call those from alternate
11 * interfaces.
12 *
13 * @package MediaWiki
14 */
15
16 class EditPage {
17 var $mArticle;
18 var $mTitle;
19 var $mMetaData = '';
20 var $isConflict = false;
21 var $isCssJsSubpage = false;
22 var $deletedSinceEdit = false;
23 var $formtype;
24 var $firsttime;
25 var $lastDelete;
26 var $mTokenOk = true;
27 var $tooBig = false;
28 var $kblength = false;
29 var $missingComment = false;
30 var $missingSummary = false;
31 var $allowBlankSummary = false;
32 var $autoSumm = '';
33 var $hookError = '';
34
35 # Form values
36 var $save = false, $preview = false, $diff = false;
37 var $minoredit = false, $watchthis = false, $recreate = false;
38 var $textbox1 = '', $textbox2 = '', $summary = '';
39 var $edittime = '', $section = '', $starttime = '';
40 var $oldid = 0, $editintro = '', $scrolltop = null;
41
42 /**
43 * @todo document
44 * @param $article
45 */
46 function EditPage( $article ) {
47 $this->mArticle =& $article;
48 global $wgTitle;
49 $this->mTitle =& $wgTitle;
50 }
51
52 /**
53 * This is the function that extracts metadata from the article body on the first view.
54 * To turn the feature on, set $wgUseMetadataEdit = true ; in LocalSettings
55 * and set $wgMetadataWhitelist to the *full* title of the template whitelist
56 */
57 function extractMetaDataFromArticle () {
58 global $wgUseMetadataEdit , $wgMetadataWhitelist , $wgLang ;
59 $this->mMetaData = '' ;
60 if ( !$wgUseMetadataEdit ) return ;
61 if ( $wgMetadataWhitelist == '' ) return ;
62 $s = '' ;
63 $t = $this->mArticle->getContent();
64
65 # MISSING : <nowiki> filtering
66
67 # Categories and language links
68 $t = explode ( "\n" , $t ) ;
69 $catlow = strtolower ( $wgLang->getNsText ( NS_CATEGORY ) ) ;
70 $cat = $ll = array() ;
71 foreach ( $t AS $key => $x )
72 {
73 $y = trim ( strtolower ( $x ) ) ;
74 while ( substr ( $y , 0 , 2 ) == '[[' )
75 {
76 $y = explode ( ']]' , trim ( $x ) ) ;
77 $first = array_shift ( $y ) ;
78 $first = explode ( ':' , $first ) ;
79 $ns = array_shift ( $first ) ;
80 $ns = trim ( str_replace ( '[' , '' , $ns ) ) ;
81 if ( strlen ( $ns ) == 2 OR strtolower ( $ns ) == $catlow )
82 {
83 $add = '[[' . $ns . ':' . implode ( ':' , $first ) . ']]' ;
84 if ( strtolower ( $ns ) == $catlow ) $cat[] = $add ;
85 else $ll[] = $add ;
86 $x = implode ( ']]' , $y ) ;
87 $t[$key] = $x ;
88 $y = trim ( strtolower ( $x ) ) ;
89 }
90 }
91 }
92 if ( count ( $cat ) ) $s .= implode ( ' ' , $cat ) . "\n" ;
93 if ( count ( $ll ) ) $s .= implode ( ' ' , $ll ) . "\n" ;
94 $t = implode ( "\n" , $t ) ;
95
96 # Load whitelist
97 $sat = array () ; # stand-alone-templates; must be lowercase
98 $wl_title = Title::newFromText ( $wgMetadataWhitelist ) ;
99 $wl_article = new Article ( $wl_title ) ;
100 $wl = explode ( "\n" , $wl_article->getContent() ) ;
101 foreach ( $wl AS $x )
102 {
103 $isentry = false ;
104 $x = trim ( $x ) ;
105 while ( substr ( $x , 0 , 1 ) == '*' )
106 {
107 $isentry = true ;
108 $x = trim ( substr ( $x , 1 ) ) ;
109 }
110 if ( $isentry )
111 {
112 $sat[] = strtolower ( $x ) ;
113 }
114
115 }
116
117 # Templates, but only some
118 $t = explode ( '{{' , $t ) ;
119 $tl = array () ;
120 foreach ( $t AS $key => $x )
121 {
122 $y = explode ( '}}' , $x , 2 ) ;
123 if ( count ( $y ) == 2 )
124 {
125 $z = $y[0] ;
126 $z = explode ( '|' , $z ) ;
127 $tn = array_shift ( $z ) ;
128 if ( in_array ( strtolower ( $tn ) , $sat ) )
129 {
130 $tl[] = '{{' . $y[0] . '}}' ;
131 $t[$key] = $y[1] ;
132 $y = explode ( '}}' , $y[1] , 2 ) ;
133 }
134 else $t[$key] = '{{' . $x ;
135 }
136 else if ( $key != 0 ) $t[$key] = '{{' . $x ;
137 else $t[$key] = $x ;
138 }
139 if ( count ( $tl ) ) $s .= implode ( ' ' , $tl ) ;
140 $t = implode ( '' , $t ) ;
141
142 $t = str_replace ( "\n\n\n" , "\n" , $t ) ;
143 $this->mArticle->mContent = $t ;
144 $this->mMetaData = $s ;
145 }
146
147 function submit() {
148 $this->edit();
149 }
150
151 /**
152 * This is the function that gets called for "action=edit". It
153 * sets up various member variables, then passes execution to
154 * another function, usually showEditForm()
155 *
156 * The edit form is self-submitting, so that when things like
157 * preview and edit conflicts occur, we get the same form back
158 * with the extra stuff added. Only when the final submission
159 * is made and all is well do we actually save and redirect to
160 * the newly-edited page.
161 */
162 function edit() {
163 global $wgOut, $wgUser, $wgRequest, $wgTitle;
164 global $wgEmailConfirmToEdit;
165
166 if ( ! wfRunHooks( 'AlternateEdit', array( &$this ) ) )
167 return;
168
169 $fname = 'EditPage::edit';
170 wfProfileIn( $fname );
171 wfDebug( "$fname: enter\n" );
172
173 // this is not an article
174 $wgOut->setArticleFlag(false);
175
176 $this->importFormData( $wgRequest );
177 $this->firsttime = false;
178
179 if( $this->live ) {
180 $this->livePreview();
181 wfProfileOut( $fname );
182 return;
183 }
184
185 if ( ! $this->mTitle->userCanEdit() ) {
186 wfDebug( "$fname: user can't edit\n" );
187 $wgOut->readOnlyPage( $this->mArticle->getContent(), true );
188 wfProfileOut( $fname );
189 return;
190 }
191 wfDebug( "$fname: Checking blocks\n" );
192 if ( !$this->preview && !$this->diff && $wgUser->isBlockedFrom( $this->mTitle, !$this->save ) ) {
193 # When previewing, don't check blocked state - will get caught at save time.
194 # Also, check when starting edition is done against slave to improve performance.
195 wfDebug( "$fname: user is blocked\n" );
196 $wgOut->blockedPage();
197 wfProfileOut( $fname );
198 return;
199 }
200 if ( !$wgUser->isAllowed('edit') ) {
201 if ( $wgUser->isAnon() ) {
202 wfDebug( "$fname: user must log in\n" );
203 $this->userNotLoggedInPage();
204 wfProfileOut( $fname );
205 return;
206 } else {
207 wfDebug( "$fname: read-only page\n" );
208 $wgOut->readOnlyPage( $this->mArticle->getContent(), true );
209 wfProfileOut( $fname );
210 return;
211 }
212 }
213 if ($wgEmailConfirmToEdit && !$wgUser->isEmailConfirmed()) {
214 wfDebug("$fname: user must confirm e-mail address\n");
215 $this->userNotConfirmedPage();
216 wfProfileOut($fname);
217 return;
218 }
219 if ( !$this->mTitle->userCan( 'create' ) && !$this->mTitle->exists() ) {
220 wfDebug( "$fname: no create permission\n" );
221 $this->noCreatePermission();
222 wfProfileOut( $fname );
223 return;
224 }
225 if ( wfReadOnly() ) {
226 wfDebug( "$fname: read-only mode is engaged\n" );
227 if( $this->save || $this->preview ) {
228 $this->formtype = 'preview';
229 } else if ( $this->diff ) {
230 $this->formtype = 'diff';
231 } else {
232 $wgOut->readOnlyPage( $this->mArticle->getContent() );
233 wfProfileOut( $fname );
234 return;
235 }
236 } else {
237 if ( $this->save ) {
238 $this->formtype = 'save';
239 } else if ( $this->preview ) {
240 $this->formtype = 'preview';
241 } else if ( $this->diff ) {
242 $this->formtype = 'diff';
243 } else { # First time through
244 $this->firsttime = true;
245 if( $this->previewOnOpen() ) {
246 $this->formtype = 'preview';
247 } else {
248 $this->extractMetaDataFromArticle () ;
249 $this->formtype = 'initial';
250 }
251 }
252 }
253
254 wfProfileIn( "$fname-business-end" );
255
256 $this->isConflict = false;
257 // css / js subpages of user pages get a special treatment
258 $this->isCssJsSubpage = $wgTitle->isCssJsSubpage();
259 $this->isValidCssJsSubpage = $wgTitle->isValidCssJsSubpage();
260
261 /* Notice that we can't use isDeleted, because it returns true if article is ever deleted
262 * no matter it's current state
263 */
264 $this->deletedSinceEdit = false;
265 if ( $this->edittime != '' ) {
266 /* Note that we rely on logging table, which hasn't been always there,
267 * but that doesn't matter, because this only applies to brand new
268 * deletes. This is done on every preview and save request. Move it further down
269 * to only perform it on saves
270 */
271 if ( $this->mTitle->isDeleted() ) {
272 $this->lastDelete = $this->getLastDelete();
273 if ( !is_null($this->lastDelete) ) {
274 $deletetime = $this->lastDelete->log_timestamp;
275 if ( ($deletetime - $this->starttime) > 0 ) {
276 $this->deletedSinceEdit = true;
277 }
278 }
279 }
280 }
281
282 if(!$this->mTitle->getArticleID() && ('initial' == $this->formtype || $this->firsttime )) { # new article
283 $this->showIntro();
284 }
285 if( $this->mTitle->isTalkPage() ) {
286 $wgOut->addWikiText( wfMsg( 'talkpagetext' ) );
287 }
288
289 # Attempt submission here. This will check for edit conflicts,
290 # and redundantly check for locked database, blocked IPs, etc.
291 # that edit() already checked just in case someone tries to sneak
292 # in the back door with a hand-edited submission URL.
293
294 if ( 'save' == $this->formtype ) {
295 if ( !$this->attemptSave() ) {
296 wfProfileOut( "$fname-business-end" );
297 wfProfileOut( $fname );
298 return;
299 }
300 }
301
302 # First time through: get contents, set time for conflict
303 # checking, etc.
304 if ( 'initial' == $this->formtype || $this->firsttime ) {
305 $this->initialiseForm();
306 }
307
308 $this->showEditForm();
309 wfProfileOut( "$fname-business-end" );
310 wfProfileOut( $fname );
311 }
312
313 /**
314 * Return true if this page should be previewed when the edit form
315 * is initially opened.
316 * @return bool
317 * @private
318 */
319 function previewOnOpen() {
320 global $wgUser;
321 return $this->section != 'new' &&
322 ( ( $wgUser->getOption( 'previewonfirst' ) && $this->mTitle->exists() ) ||
323 ( $this->mTitle->getNamespace() == NS_CATEGORY &&
324 !$this->mTitle->exists() ) );
325 }
326
327 /**
328 * @todo document
329 * @param $request
330 */
331 function importFormData( &$request ) {
332 global $wgLang, $wgUser;
333 $fname = 'EditPage::importFormData';
334 wfProfileIn( $fname );
335
336 if( $request->wasPosted() ) {
337 # These fields need to be checked for encoding.
338 # Also remove trailing whitespace, but don't remove _initial_
339 # whitespace from the text boxes. This may be significant formatting.
340 $this->textbox1 = $this->safeUnicodeInput( $request, 'wpTextbox1' );
341 $this->textbox2 = $this->safeUnicodeInput( $request, 'wpTextbox2' );
342 $this->mMetaData = rtrim( $request->getText( 'metadata' ) );
343 # Truncate for whole multibyte characters. +5 bytes for ellipsis
344 $this->summary = $wgLang->truncate( $request->getText( 'wpSummary' ), 250 );
345
346 $this->edittime = $request->getVal( 'wpEdittime' );
347 $this->starttime = $request->getVal( 'wpStarttime' );
348
349 $this->scrolltop = $request->getIntOrNull( 'wpScrolltop' );
350
351 if( is_null( $this->edittime ) ) {
352 # If the form is incomplete, force to preview.
353 wfDebug( "$fname: Form data appears to be incomplete\n" );
354 wfDebug( "POST DATA: " . var_export( $_POST, true ) . "\n" );
355 $this->preview = true;
356 } else {
357 /* Fallback for live preview */
358 $this->preview = $request->getCheck( 'wpPreview' ) || $request->getCheck( 'wpLivePreview' );
359 $this->diff = $request->getCheck( 'wpDiff' );
360
361 if( !$this->preview ) {
362 if ( $this->tokenOk( $request ) ) {
363 # Some browsers will not report any submit button
364 # if the user hits enter in the comment box.
365 # The unmarked state will be assumed to be a save,
366 # if the form seems otherwise complete.
367 wfDebug( "$fname: Passed token check.\n" );
368 } else {
369 # Page might be a hack attempt posted from
370 # an external site. Preview instead of saving.
371 wfDebug( "$fname: Failed token check; forcing preview\n" );
372 $this->preview = true;
373 }
374 }
375 }
376 $this->save = ! ( $this->preview OR $this->diff );
377 if( !preg_match( '/^\d{14}$/', $this->edittime )) {
378 $this->edittime = null;
379 }
380
381 if( !preg_match( '/^\d{14}$/', $this->starttime )) {
382 $this->starttime = null;
383 }
384
385 $this->recreate = $request->getCheck( 'wpRecreate' );
386
387 $this->minoredit = $request->getCheck( 'wpMinoredit' );
388 $this->watchthis = $request->getCheck( 'wpWatchthis' );
389
390 # Don't force edit summaries when a user is editing their own user or talk page
391 if( ( $this->mTitle->mNamespace == NS_USER || $this->mTitle->mNamespace == NS_USER_TALK ) && $this->mTitle->getText() == $wgUser->getName() ) {
392 $this->allowBlankSummary = true;
393 } else {
394 $this->allowBlankSummary = $request->getBool( 'wpIgnoreBlankSummary' );
395 }
396
397 $this->autoSumm = $request->getText( 'wpAutoSummary' );
398 } else {
399 # Not a posted form? Start with nothing.
400 wfDebug( "$fname: Not a posted form.\n" );
401 $this->textbox1 = '';
402 $this->textbox2 = '';
403 $this->mMetaData = '';
404 $this->summary = '';
405 $this->edittime = '';
406 $this->starttime = wfTimestampNow();
407 $this->preview = false;
408 $this->save = false;
409 $this->diff = false;
410 $this->minoredit = false;
411 $this->watchthis = false;
412 $this->recreate = false;
413 }
414
415 $this->oldid = $request->getInt( 'oldid' );
416
417 # Section edit can come from either the form or a link
418 $this->section = $request->getVal( 'wpSection', $request->getVal( 'section' ) );
419
420 $this->live = $request->getCheck( 'live' );
421 $this->editintro = $request->getText( 'editintro' );
422
423 wfProfileOut( $fname );
424 }
425
426 /**
427 * Make sure the form isn't faking a user's credentials.
428 *
429 * @param $request WebRequest
430 * @return bool
431 * @private
432 */
433 function tokenOk( &$request ) {
434 global $wgUser;
435 if( $wgUser->isAnon() ) {
436 # Anonymous users may not have a session
437 # open. Don't tokenize.
438 $this->mTokenOk = true;
439 } else {
440 $this->mTokenOk = $wgUser->matchEditToken( $request->getVal( 'wpEditToken' ) );
441 }
442 return $this->mTokenOk;
443 }
444
445 /** */
446 function showIntro() {
447 global $wgOut, $wgUser;
448 $addstandardintro=true;
449 if($this->editintro) {
450 $introtitle=Title::newFromText($this->editintro);
451 if(isset($introtitle) && $introtitle->userCanRead()) {
452 $rev=Revision::newFromTitle($introtitle);
453 if($rev) {
454 $wgOut->addSecondaryWikiText($rev->getText());
455 $addstandardintro=false;
456 }
457 }
458 }
459 if($addstandardintro) {
460 if ( $wgUser->isLoggedIn() )
461 $wgOut->addWikiText( wfMsg( 'newarticletext' ) );
462 else
463 $wgOut->addWikiText( wfMsg( 'newarticletextanon' ) );
464 }
465 }
466
467 /**
468 * Attempt submission
469 * @return bool false if output is done, true if the rest of the form should be displayed
470 */
471 function attemptSave() {
472 global $wgSpamRegex, $wgFilterCallback, $wgUser, $wgOut;
473 global $wgMaxArticleSize;
474
475 $fname = 'EditPage::attemptSave';
476 wfProfileIn( $fname );
477 wfProfileIn( "$fname-checks" );
478
479 # Reintegrate metadata
480 if ( $this->mMetaData != '' ) $this->textbox1 .= "\n" . $this->mMetaData ;
481 $this->mMetaData = '' ;
482
483 # Check for spam
484 if ( $wgSpamRegex && preg_match( $wgSpamRegex, $this->textbox1, $matches ) ) {
485 $this->spamPage ( $matches[0] );
486 wfProfileOut( "$fname-checks" );
487 wfProfileOut( $fname );
488 return false;
489 }
490 if ( $wgFilterCallback && $wgFilterCallback( $this->mTitle, $this->textbox1, $this->section ) ) {
491 # Error messages or other handling should be performed by the filter function
492 wfProfileOut( $fname );
493 wfProfileOut( "$fname-checks" );
494 return false;
495 }
496 if ( !wfRunHooks( 'EditFilter', array( $this, $this->textbox1, $this->section, &$this->hookError ) ) ) {
497 # Error messages etc. could be handled within the hook...
498 wfProfileOut( $fname );
499 wfProfileOut( "$fname-checks" );
500 return false;
501 } elseif( $this->hookError != '' ) {
502 # ...or the hook could be expecting us to produce an error
503 wfProfileOut( "$fname-checks " );
504 wfProfileOut( $fname );
505 return true;
506 }
507 if ( $wgUser->isBlockedFrom( $this->mTitle, false ) ) {
508 # Check block state against master, thus 'false'.
509 $this->blockedIPpage();
510 wfProfileOut( "$fname-checks" );
511 wfProfileOut( $fname );
512 return false;
513 }
514 $this->kblength = (int)(strlen( $this->textbox1 ) / 1024);
515 if ( $this->kblength > $wgMaxArticleSize ) {
516 // Error will be displayed by showEditForm()
517 $this->tooBig = true;
518 wfProfileOut( "$fname-checks" );
519 wfProfileOut( $fname );
520 return true;
521 }
522
523 if ( !$wgUser->isAllowed('edit') ) {
524 if ( $wgUser->isAnon() ) {
525 $this->userNotLoggedInPage();
526 wfProfileOut( "$fname-checks" );
527 wfProfileOut( $fname );
528 return false;
529 }
530 else {
531 $wgOut->readOnlyPage();
532 wfProfileOut( "$fname-checks" );
533 wfProfileOut( $fname );
534 return false;
535 }
536 }
537
538 if ( wfReadOnly() ) {
539 $wgOut->readOnlyPage();
540 wfProfileOut( "$fname-checks" );
541 wfProfileOut( $fname );
542 return false;
543 }
544 if ( $wgUser->pingLimiter() ) {
545 $wgOut->rateLimited();
546 wfProfileOut( "$fname-checks" );
547 wfProfileOut( $fname );
548 return false;
549 }
550
551 # If the article has been deleted while editing, don't save it without
552 # confirmation
553 if ( $this->deletedSinceEdit && !$this->recreate ) {
554 wfProfileOut( "$fname-checks" );
555 wfProfileOut( $fname );
556 return true;
557 }
558
559 wfProfileOut( "$fname-checks" );
560
561 # If article is new, insert it.
562 $aid = $this->mTitle->getArticleID( GAID_FOR_UPDATE );
563 if ( 0 == $aid ) {
564 // Late check for create permission, just in case *PARANOIA*
565 if ( !$this->mTitle->userCan( 'create' ) ) {
566 wfDebug( "$fname: no create permission\n" );
567 $this->noCreatePermission();
568 wfProfileOut( $fname );
569 return;
570 }
571
572 # Don't save a new article if it's blank.
573 if ( ( '' == $this->textbox1 ) ) {
574 $wgOut->redirect( $this->mTitle->getFullURL() );
575 wfProfileOut( $fname );
576 return false;
577 }
578
579 $isComment=($this->section=='new');
580 $this->mArticle->insertNewArticle( $this->textbox1, $this->summary,
581 $this->minoredit, $this->watchthis, false, $isComment);
582
583 wfProfileOut( $fname );
584 return false;
585 }
586
587 # Article exists. Check for edit conflict.
588
589 $this->mArticle->clear(); # Force reload of dates, etc.
590 $this->mArticle->forUpdate( true ); # Lock the article
591
592 if( $this->mArticle->getTimestamp() != $this->edittime ) {
593 $this->isConflict = true;
594 if( $this->section == 'new' ) {
595 if( $this->mArticle->getUserText() == $wgUser->getName() &&
596 $this->mArticle->getComment() == $this->summary ) {
597 // Probably a duplicate submission of a new comment.
598 // This can happen when squid resends a request after
599 // a timeout but the first one actually went through.
600 wfDebug( "EditPage::editForm duplicate new section submission; trigger edit conflict!\n" );
601 } else {
602 // New comment; suppress conflict.
603 $this->isConflict = false;
604 wfDebug( "EditPage::editForm conflict suppressed; new section\n" );
605 }
606 }
607 }
608 $userid = $wgUser->getID();
609
610 if ( $this->isConflict) {
611 wfDebug( "EditPage::editForm conflict! getting section '$this->section' for time '$this->edittime' (article time '" .
612 $this->mArticle->getTimestamp() . "'\n" );
613 $text = $this->mArticle->replaceSection( $this->section, $this->textbox1, $this->summary, $this->edittime);
614 }
615 else {
616 wfDebug( "EditPage::editForm getting section '$this->section'\n" );
617 $text = $this->mArticle->replaceSection( $this->section, $this->textbox1, $this->summary);
618 }
619 if( is_null( $text ) ) {
620 wfDebug( "EditPage::editForm activating conflict; section replace failed.\n" );
621 $this->isConflict = true;
622 $text = $this->textbox1;
623 }
624
625 # Suppress edit conflict with self, except for section edits where merging is required.
626 if ( ( $this->section == '' ) && ( 0 != $userid ) && ( $this->mArticle->getUser() == $userid ) ) {
627 wfDebug( "Suppressing edit conflict, same user.\n" );
628 $this->isConflict = false;
629 } else {
630 # switch from section editing to normal editing in edit conflict
631 if($this->isConflict) {
632 # Attempt merge
633 if( $this->mergeChangesInto( $text ) ){
634 // Successful merge! Maybe we should tell the user the good news?
635 $this->isConflict = false;
636 wfDebug( "Suppressing edit conflict, successful merge.\n" );
637 } else {
638 $this->section = '';
639 $this->textbox1 = $text;
640 wfDebug( "Keeping edit conflict, failed merge.\n" );
641 }
642 }
643 }
644
645 if ( $this->isConflict ) {
646 wfProfileOut( $fname );
647 return true;
648 }
649
650 # Handle the user preference to force summaries here
651 if( $this->section != 'new' && !$this->allowBlankSummary && $wgUser->getOption( 'forceeditsummary' ) ) {
652 if( md5( $this->summary ) == $this->autoSumm ) {
653 $this->missingSummary = true;
654 wfProfileOut( $fname );
655 return( true );
656 }
657 }
658
659 # All's well
660 wfProfileIn( "$fname-sectionanchor" );
661 $sectionanchor = '';
662 if( $this->section == 'new' ) {
663 if ( $this->textbox1 == '' ) {
664 $this->missingComment = true;
665 return true;
666 }
667 if( $this->summary != '' ) {
668 $sectionanchor = $this->sectionAnchor( $this->summary );
669 }
670 } elseif( $this->section != '' ) {
671 # Try to get a section anchor from the section source, redirect to edited section if header found
672 # XXX: might be better to integrate this into Article::replaceSection
673 # for duplicate heading checking and maybe parsing
674 $hasmatch = preg_match( "/^ *([=]{1,6})(.*?)(\\1) *\\n/i", $this->textbox1, $matches );
675 # we can't deal with anchors, includes, html etc in the header for now,
676 # headline would need to be parsed to improve this
677 if($hasmatch and strlen($matches[2]) > 0) {
678 $sectionanchor = $this->sectionAnchor( $matches[2] );
679 }
680 }
681 wfProfileOut( "$fname-sectionanchor" );
682
683 // Save errors may fall down to the edit form, but we've now
684 // merged the section into full text. Clear the section field
685 // so that later submission of conflict forms won't try to
686 // replace that into a duplicated mess.
687 $this->textbox1 = $text;
688 $this->section = '';
689
690 // Check for length errors again now that the section is merged in
691 $this->kblength = (int)(strlen( $text ) / 1024);
692 if ( $this->kblength > $wgMaxArticleSize ) {
693 $this->tooBig = true;
694 wfProfileOut( $fname );
695 return true;
696 }
697
698 # update the article here
699 if( $this->mArticle->updateArticle( $text, $this->summary, $this->minoredit,
700 $this->watchthis, '', $sectionanchor ) ) {
701 wfProfileOut( $fname );
702 return false;
703 } else {
704 $this->isConflict = true;
705 }
706 wfProfileOut( $fname );
707 return true;
708 }
709
710 /**
711 * Initialise form fields in the object
712 * Called on the first invocation, e.g. when a user clicks an edit link
713 */
714 function initialiseForm() {
715 $this->edittime = $this->mArticle->getTimestamp();
716 $this->textbox1 = $this->mArticle->getContent();
717 $this->summary = '';
718 if ( !$this->mArticle->exists() && $this->mArticle->mTitle->getNamespace() == NS_MEDIAWIKI )
719 $this->textbox1 = wfMsgWeirdKey ( $this->mArticle->mTitle->getText() ) ;
720 wfProxyCheck();
721 }
722
723 /**
724 * Send the edit form and related headers to $wgOut
725 * @param $formCallback Optional callable that takes an OutputPage
726 * parameter; will be called during form output
727 * near the top, for captchas and the like.
728 */
729 function showEditForm( $formCallback=null ) {
730 global $wgOut, $wgUser, $wgLang, $wgContLang, $wgMaxArticleSize;
731
732 $fname = 'EditPage::showEditForm';
733 wfProfileIn( $fname );
734
735 $sk =& $wgUser->getSkin();
736
737 wfRunHooks( 'EditPage::showEditForm:initial', array( &$this ) ) ;
738
739 $wgOut->setRobotpolicy( 'noindex,nofollow' );
740
741 # Enabled article-related sidebar, toplinks, etc.
742 $wgOut->setArticleRelated( true );
743
744 if ( $this->isConflict ) {
745 $s = wfMsg( 'editconflict', $this->mTitle->getPrefixedText() );
746 $wgOut->setPageTitle( $s );
747 $wgOut->addWikiText( wfMsg( 'explainconflict' ) );
748
749 $this->textbox2 = $this->textbox1;
750 $this->textbox1 = $this->mArticle->getContent();
751 $this->edittime = $this->mArticle->getTimestamp();
752 } else {
753
754 if( $this->section != '' ) {
755 if( $this->section == 'new' ) {
756 $s = wfMsg('editingcomment', $this->mTitle->getPrefixedText() );
757 } else {
758 $s = wfMsg('editingsection', $this->mTitle->getPrefixedText() );
759 if( !$this->preview && !$this->diff ) {
760 preg_match( "/^(=+)(.+)\\1/mi",
761 $this->textbox1,
762 $matches );
763 if( !empty( $matches[2] ) ) {
764 $this->summary = "/* ". trim($matches[2])." */ ";
765 }
766 }
767 }
768 } else {
769 $s = wfMsg( 'editing', $this->mTitle->getPrefixedText() );
770 }
771 $wgOut->setPageTitle( $s );
772
773 if ( $this->missingComment ) {
774 $wgOut->addWikiText( wfMsg( 'missingcommenttext' ) );
775 }
776
777 if( $this->missingSummary ) {
778 $wgOut->addWikiText( wfMsg( 'missingsummary' ) );
779 }
780
781 if( !$this->hookError == '' ) {
782 $wgOut->addWikiText( $this->hookError );
783 }
784
785 if ( !$this->checkUnicodeCompliantBrowser() ) {
786 $wgOut->addWikiText( wfMsg( 'nonunicodebrowser') );
787 }
788 if ( isset( $this->mArticle )
789 && isset( $this->mArticle->mRevision )
790 && !$this->mArticle->mRevision->isCurrent() ) {
791 $this->mArticle->setOldSubtitle( $this->mArticle->mRevision->getId() );
792 $wgOut->addWikiText( wfMsg( 'editingold' ) );
793 }
794 }
795
796 if( wfReadOnly() ) {
797 $wgOut->addWikiText( wfMsg( 'readonlywarning' ) );
798 } elseif( $wgUser->isAnon() && $this->formtype != 'preview' ) {
799 $wgOut->addWikiText( wfMsg( 'anoneditwarning' ) );
800 } else {
801 if( $this->isCssJsSubpage && $this->formtype != 'preview' ) {
802 # Check the skin exists
803 if( $this->isValidCssJsSubpage ) {
804 $wgOut->addWikiText( wfMsg( 'usercssjsyoucanpreview' ) );
805 } else {
806 $wgOut->addWikiText( wfMsg( 'userinvalidcssjstitle', $this->mTitle->getSkinFromCssJsSubpage() ) );
807 }
808 }
809 }
810
811 if( $this->mTitle->isProtected( 'edit' ) ) {
812 # Is the protection due to the namespace, e.g. interface text?
813 if( $this->mTitle->getNamespace() == NS_MEDIAWIKI ) {
814 # Yes; remind the user
815 $notice = wfMsg( 'editinginterface' );
816 } elseif( $this->mTitle->isSemiProtected() ) {
817 # No; semi protected
818 $notice = wfMsg( 'semiprotectedpagewarning' );
819 if( wfEmptyMsg( 'semiprotectedpagewarning', $notice ) || $notice == '-' ) {
820 $notice = '';
821 }
822 } else {
823 # No; regular protection
824 $notice = wfMsg( 'protectedpagewarning' );
825 }
826 $wgOut->addWikiText( $notice );
827 }
828
829 if ( $this->kblength === false ) {
830 $this->kblength = (int)(strlen( $this->textbox1 ) / 1024);
831 }
832 if ( $this->tooBig || $this->kblength > $wgMaxArticleSize ) {
833 $wgOut->addWikiText( wfMsg( 'longpageerror', $wgLang->formatNum( $this->kblength ), $wgMaxArticleSize ) );
834 } elseif( $this->kblength > 29 ) {
835 $wgOut->addWikiText( wfMsg( 'longpagewarning', $wgLang->formatNum( $this->kblength ) ) );
836 }
837
838 $rows = $wgUser->getIntOption( 'rows' );
839 $cols = $wgUser->getIntOption( 'cols' );
840
841 $ew = $wgUser->getOption( 'editwidth' );
842 if ( $ew ) $ew = " style=\"width:100%\"";
843 else $ew = '';
844
845 $q = 'action=submit';
846 #if ( "no" == $redirect ) { $q .= "&redirect=no"; }
847 $action = $this->mTitle->escapeLocalURL( $q );
848
849 $summary = wfMsg('summary');
850 $subject = wfMsg('subject');
851 $minor = wfMsgExt('minoredit', array('parseinline'));
852 $watchthis = wfMsgExt('watchthis', array('parseinline'));
853
854 $cancel = $sk->makeKnownLink( $this->mTitle->getPrefixedText(),
855 wfMsgExt('cancel', array('parseinline')) );
856 $edithelpurl = $sk->makeInternalOrExternalUrl( wfMsgForContent( 'edithelppage' ));
857 $edithelp = '<a target="helpwindow" href="'.$edithelpurl.'">'.
858 htmlspecialchars( wfMsg( 'edithelp' ) ).'</a> '.
859 htmlspecialchars( wfMsg( 'newwindow' ) );
860
861 global $wgRightsText;
862 $copywarn = "<div id=\"editpage-copywarn\">\n" .
863 wfMsg( $wgRightsText ? 'copyrightwarning' : 'copyrightwarning2',
864 '[[' . wfMsgForContent( 'copyrightpage' ) . ']]',
865 $wgRightsText ) . "\n</div>";
866
867 if( $wgUser->getOption('showtoolbar') and !$this->isCssJsSubpage ) {
868 # prepare toolbar for edit buttons
869 $toolbar = $this->getEditToolbar();
870 } else {
871 $toolbar = '';
872 }
873
874 // activate checkboxes if user wants them to be always active
875 if( !$this->preview && !$this->diff ) {
876 # Sort out the "watch" checkbox
877 if( $wgUser->getOption( 'watchdefault' ) ) {
878 # Watch all edits
879 $this->watchthis = true;
880 } elseif( $wgUser->getOption( 'watchcreations' ) && !$this->mTitle->exists() ) {
881 # Watch creations
882 $this->watchthis = true;
883 } elseif( $this->mTitle->userIsWatching() ) {
884 # Already watched
885 $this->watchthis = true;
886 }
887
888 if( $wgUser->getOption( 'minordefault' ) ) $this->minoredit = true;
889 }
890
891 $minoredithtml = '';
892
893 if ( $wgUser->isAllowed('minoredit') ) {
894 $minoredithtml =
895 "<input tabindex='3' type='checkbox' value='1' name='wpMinoredit'".($this->minoredit?" checked='checked'":"").
896 " accesskey='".wfMsg('accesskey-minoredit')."' id='wpMinoredit' />\n".
897 "<label for='wpMinoredit' title='".wfMsg('tooltip-minoredit')."'>{$minor}</label>\n";
898 }
899
900 $watchhtml = '';
901
902 if ( $wgUser->isLoggedIn() ) {
903 $watchhtml = "<input tabindex='4' type='checkbox' name='wpWatchthis'".
904 ($this->watchthis?" checked='checked'":"").
905 " accesskey=\"".htmlspecialchars(wfMsg('accesskey-watch'))."\" id='wpWatchthis' />\n".
906 "<label for='wpWatchthis' title=\"" .
907 htmlspecialchars(wfMsg('tooltip-watch'))."\">{$watchthis}</label>\n";
908 }
909
910 $checkboxhtml = $minoredithtml . $watchhtml;
911
912 if ( $wgUser->getOption( 'previewontop' ) ) {
913
914 if ( 'preview' == $this->formtype ) {
915 $this->showPreview();
916 } else {
917 $wgOut->addHTML( '<div id="wikiPreview"></div>' );
918 }
919
920 if ( 'diff' == $this->formtype ) {
921 $wgOut->addHTML( $this->getDiff() );
922 }
923 }
924
925
926 # if this is a comment, show a subject line at the top, which is also the edit summary.
927 # Otherwise, show a summary field at the bottom
928 $summarytext = htmlspecialchars( $wgContLang->recodeForEdit( $this->summary ) ); # FIXME
929 if( $this->section == 'new' ) {
930 $commentsubject="<span id='wpSummaryLabel'><label for='wpSummary'>{$subject}:</label></span>\n<div class='editOptions'>\n<input tabindex='1' type='text' value=\"$summarytext\" name='wpSummary' id='wpSummary' maxlength='200' size='60' /><br />";
931 $editsummary = '';
932 } else {
933 $commentsubject = '';
934 $editsummary="<span id='wpSummaryLabel'><label for='wpSummary'>{$summary}:</label></span>\n<div class='editOptions'>\n<input tabindex='2' type='text' value=\"$summarytext\" name='wpSummary' id='wpSummary' maxlength='200' size='60' /><br />";
935 }
936
937 # Set focus to the edit box on load, except on preview or diff, where it would interfere with the display
938 if( !$this->preview && !$this->diff ) {
939 $wgOut->setOnloadHandler( 'document.editform.wpTextbox1.focus()' );
940 }
941 $templates = $this->formatTemplates();
942
943 global $wgUseMetadataEdit ;
944 if ( $wgUseMetadataEdit ) {
945 $metadata = $this->mMetaData ;
946 $metadata = htmlspecialchars( $wgContLang->recodeForEdit( $metadata ) ) ;
947 $top = wfMsgWikiHtml( 'metadata_help' );
948 $metadata = $top . "<textarea name='metadata' rows='3' cols='{$cols}'{$ew}>{$metadata}</textarea>" ;
949 }
950 else $metadata = "" ;
951
952 $hidden = '';
953 $recreate = '';
954 if ($this->deletedSinceEdit) {
955 if ( 'save' != $this->formtype ) {
956 $wgOut->addWikiText( wfMsg('deletedwhileediting'));
957 } else {
958 // Hide the toolbar and edit area, use can click preview to get it back
959 // Add an confirmation checkbox and explanation.
960 $toolbar = '';
961 $hidden = 'type="hidden" style="display:none;"';
962 $recreate = $wgOut->parse( wfMsg( 'confirmrecreate', $this->lastDelete->user_name , $this->lastDelete->log_comment ));
963 $recreate .=
964 "<br /><input tabindex='1' type='checkbox' value='1' name='wpRecreate' id='wpRecreate' />".
965 "<label for='wpRecreate' title='".wfMsg('tooltip-recreate')."'>". wfMsg('recreate')."</label>";
966 }
967 }
968
969 $temp = array(
970 'id' => 'wpSave',
971 'name' => 'wpSave',
972 'type' => 'submit',
973 'tabindex' => '5',
974 'value' => wfMsg('savearticle'),
975 'accesskey' => wfMsg('accesskey-save'),
976 'title' => wfMsg('tooltip-save'),
977 );
978 $buttons['save'] = wfElement('input', $temp, '');
979 $temp = array(
980 'id' => 'wpDiff',
981 'name' => 'wpDiff',
982 'type' => 'submit',
983 'tabindex' => '7',
984 'value' => wfMsg('showdiff'),
985 'accesskey' => wfMsg('accesskey-diff'),
986 'title' => wfMsg('tooltip-diff'),
987 );
988 $buttons['diff'] = wfElement('input', $temp, '');
989
990 global $wgLivePreview;
991 if ( $wgLivePreview && $wgUser->getOption( 'uselivepreview' ) ) {
992 $temp = array(
993 'id' => 'wpPreview',
994 'name' => 'wpPreview',
995 'type' => 'submit',
996 'tabindex' => '6',
997 'value' => wfMsg('showpreview'),
998 'accesskey' => '',
999 'title' => wfMsg('tooltip-preview'),
1000 'style' => 'display: none;',
1001 );
1002 $buttons['preview'] = wfElement('input', $temp, '');
1003 $temp = array(
1004 'id' => 'wpLivePreview',
1005 'name' => 'wpLivePreview',
1006 'type' => 'submit',
1007 'tabindex' => '6',
1008 'value' => wfMsg('showlivepreview'),
1009 'accesskey' => wfMsg('accesskey-preview'),
1010 'title' => '',
1011 'onclick' => $this->doLivePreviewScript(),
1012 );
1013 $buttons['live'] = wfElement('input', $temp, '');
1014 } else {
1015 $temp = array(
1016 'id' => 'wpPreview',
1017 'name' => 'wpPreview',
1018 'type' => 'submit',
1019 'tabindex' => '6',
1020 'value' => wfMsg('showpreview'),
1021 'accesskey' => wfMsg('accesskey-preview'),
1022 'title' => wfMsg('tooltip-preview'),
1023 );
1024 $buttons['preview'] = wfElement('input', $temp, '');
1025 $buttons['live'] = '';
1026 }
1027
1028 $safemodehtml = $this->checkUnicodeCompliantBrowser()
1029 ? ""
1030 : "<input type='hidden' name=\"safemode\" value='1' />\n";
1031
1032 $wgOut->addHTML( <<<END
1033 {$toolbar}
1034 <form id="editform" name="editform" method="post" action="$action" enctype="multipart/form-data">
1035 END
1036 );
1037
1038 if( is_callable( $formCallback ) ) {
1039 call_user_func_array( $formCallback, array( &$wgOut ) );
1040 }
1041
1042 // Put these up at the top to ensure they aren't lost on early form submission
1043 $wgOut->addHTML( "
1044 <input type='hidden' value=\"" . htmlspecialchars( $this->section ) . "\" name=\"wpSection\" />
1045 <input type='hidden' value=\"{$this->starttime}\" name=\"wpStarttime\" />\n
1046 <input type='hidden' value=\"{$this->edittime}\" name=\"wpEdittime\" />\n
1047 <input type='hidden' value=\"{$this->scrolltop}\" name=\"wpScrolltop\" id=\"wpScrolltop\" />\n" );
1048
1049 $wgOut->addHTML( <<<END
1050 $recreate
1051 {$commentsubject}
1052 <textarea tabindex='1' accesskey="," name="wpTextbox1" id="wpTextbox1" rows='{$rows}'
1053 cols='{$cols}'{$ew} $hidden>
1054 END
1055 . htmlspecialchars( $this->safeUnicodeOutput( $this->textbox1 ) ) .
1056 "
1057 </textarea>
1058 " );
1059
1060 $wgOut->addWikiText( $copywarn );
1061 $wgOut->addHTML( "
1062 {$metadata}
1063 {$editsummary}
1064 {$checkboxhtml}
1065 {$safemodehtml}
1066 ");
1067
1068 $wgOut->addHTML(
1069 "<div class='editButtons'>
1070 {$buttons['save']}
1071 {$buttons['preview']}
1072 {$buttons['live']}
1073 {$buttons['diff']}
1074 <span class='editHelp'>{$cancel} | {$edithelp}</span>
1075 </div><!-- editButtons -->
1076 </div><!-- editOptions -->");
1077
1078 $wgOut->addWikiText( wfMsgForContent( 'edittools' ) );
1079
1080 $wgOut->addHTML( "
1081 <div class='templatesUsed'>
1082 {$templates}
1083 </div>
1084 " );
1085
1086 if ( $wgUser->isLoggedIn() ) {
1087 /**
1088 * To make it harder for someone to slip a user a page
1089 * which submits an edit form to the wiki without their
1090 * knowledge, a random token is associated with the login
1091 * session. If it's not passed back with the submission,
1092 * we won't save the page, or render user JavaScript and
1093 * CSS previews.
1094 */
1095 $token = htmlspecialchars( $wgUser->editToken() );
1096 $wgOut->addHTML( "\n<input type='hidden' value=\"$token\" name=\"wpEditToken\" />\n" );
1097 }
1098
1099 # If a blank edit summary was previously provided, and the appropriate
1100 # user preference is active, pass a hidden tag here. This will stop the
1101 # user being bounced back more than once in the event that a summary
1102 # is not required.
1103 if( $this->missingSummary ) {
1104 $wgOut->addHTML( "<input type=\"hidden\" name=\"wpIgnoreBlankSummary\" value=\"1\" />\n" );
1105 }
1106
1107 # For a bit more sophisticated detection of blank summaries, hash the
1108 # automatic one and pass that in a hidden field.
1109 $autosumm = $this->autoSumm ? $this->autoSumm : md5( $this->summary );
1110 $wgOut->addHTML( "<input type=\"hidden\" name=\"wpAutoSummary\" value=\"$autosumm\" />\n" );
1111
1112 if ( $this->isConflict ) {
1113 require_once( "DifferenceEngine.php" );
1114 $wgOut->addWikiText( '==' . wfMsg( "yourdiff" ) . '==' );
1115
1116 $de = new DifferenceEngine( $this->mTitle );
1117 $de->setText( $this->textbox2, $this->textbox1 );
1118 $de->showDiff( wfMsg( "yourtext" ), wfMsg( "storedversion" ) );
1119
1120 $wgOut->addWikiText( '==' . wfMsg( "yourtext" ) . '==' );
1121 $wgOut->addHTML( "<textarea tabindex=6 id='wpTextbox2' name=\"wpTextbox2\" rows='{$rows}' cols='{$cols}' wrap='virtual'>"
1122 . htmlspecialchars( $this->safeUnicodeOutput( $this->textbox2 ) ) . "\n</textarea>" );
1123 }
1124 $wgOut->addHTML( "</form>\n" );
1125 if ( !$wgUser->getOption( 'previewontop' ) ) {
1126
1127 if ( $this->formtype == 'preview') {
1128 $this->showPreview();
1129 } else {
1130 $wgOut->addHTML( '<div id="wikiPreview"></div>' );
1131 }
1132
1133 if ( $this->formtype == 'diff') {
1134 $wgOut->addHTML( $this->getDiff() );
1135 }
1136
1137 }
1138
1139 wfProfileOut( $fname );
1140 }
1141
1142 /**
1143 * Append preview output to $wgOut.
1144 * Includes category rendering if this is a category page.
1145 * @private
1146 */
1147 function showPreview() {
1148 global $wgOut;
1149 $wgOut->addHTML( '<div id="wikiPreview">' );
1150 if($this->mTitle->getNamespace() == NS_CATEGORY) {
1151 $this->mArticle->openShowCategory();
1152 }
1153 $previewOutput = $this->getPreviewText();
1154 $wgOut->addHTML( $previewOutput );
1155 if($this->mTitle->getNamespace() == NS_CATEGORY) {
1156 $this->mArticle->closeShowCategory();
1157 }
1158 $wgOut->addHTML( "<br style=\"clear:both;\" />\n" );
1159 $wgOut->addHTML( '</div>' );
1160 }
1161
1162 /**
1163 * Prepare a list of templates used by this page. Returns HTML.
1164 */
1165 function formatTemplates() {
1166 global $wgUser;
1167
1168 $fname = 'EditPage::formatTemplates';
1169 wfProfileIn( $fname );
1170
1171 $sk =& $wgUser->getSkin();
1172
1173 $outText = '';
1174 $templates = $this->mArticle->getUsedTemplates();
1175 if ( count( $templates ) > 0 ) {
1176 # Do a batch existence check
1177 $batch = new LinkBatch;
1178 foreach( $templates as $title ) {
1179 $batch->addObj( $title );
1180 }
1181 $batch->execute();
1182
1183 # Construct the HTML
1184 $outText = '<br />'. wfMsgExt( 'templatesused', array( 'parseinline' ) ) . '<ul>';
1185 foreach ( $templates as $titleObj ) {
1186 $outText .= '<li>' . $sk->makeLinkObj( $titleObj ) . '</li>';
1187 }
1188 $outText .= '</ul>';
1189 }
1190 wfProfileOut( $fname );
1191 return $outText;
1192 }
1193
1194 /**
1195 * Live Preview lets us fetch rendered preview page content and
1196 * add it to the page without refreshing the whole page.
1197 * If not supported by the browser it will fall through to the normal form
1198 * submission method.
1199 *
1200 * This function outputs a script tag to support live preview, and
1201 * returns an onclick handler which should be added to the attributes
1202 * of the preview button
1203 */
1204 function doLivePreviewScript() {
1205 global $wgStylePath, $wgJsMimeType, $wgOut, $wgTitle;
1206 $wgOut->addHTML( '<script type="'.$wgJsMimeType.'" src="' .
1207 htmlspecialchars( $wgStylePath . '/common/preview.js' ) .
1208 '"></script>' . "\n" );
1209 $liveAction = $wgTitle->getLocalUrl( 'action=submit&wpPreview=true&live=true' );
1210 return "return !livePreview(" .
1211 "getElementById('wikiPreview')," .
1212 "editform.wpTextbox1.value," .
1213 '"' . $liveAction . '"' . ")";
1214 }
1215
1216 function getLastDelete() {
1217 $dbr =& wfGetDB( DB_SLAVE );
1218 $fname = 'EditPage::getLastDelete';
1219 $res = $dbr->select(
1220 array( 'logging', 'user' ),
1221 array( 'log_type',
1222 'log_action',
1223 'log_timestamp',
1224 'log_user',
1225 'log_namespace',
1226 'log_title',
1227 'log_comment',
1228 'log_params',
1229 'user_name', ),
1230 array( 'log_namespace' => $this->mTitle->getNamespace(),
1231 'log_title' => $this->mTitle->getDBkey(),
1232 'log_type' => 'delete',
1233 'log_action' => 'delete',
1234 'user_id=log_user' ),
1235 $fname,
1236 array( 'LIMIT' => 1, 'ORDER BY' => 'log_timestamp DESC' ) );
1237
1238 if($dbr->numRows($res) == 1) {
1239 while ( $x = $dbr->fetchObject ( $res ) )
1240 $data = $x;
1241 $dbr->freeResult ( $res ) ;
1242 } else {
1243 $data = null;
1244 }
1245 return $data;
1246 }
1247
1248 /**
1249 * @todo document
1250 */
1251 function getPreviewText() {
1252 global $wgOut, $wgUser, $wgTitle, $wgParser;
1253
1254 $fname = 'EditPage::getPreviewText';
1255 wfProfileIn( $fname );
1256
1257 if ( $this->mTokenOk ) {
1258 $msg = 'previewnote';
1259 } else {
1260 $msg = 'session_fail_preview';
1261 }
1262 $previewhead = '<h2>' . htmlspecialchars( wfMsg( 'preview' ) ) . "</h2>\n" .
1263 "<div class='previewnote'>" . $wgOut->parse( wfMsg( $msg ) ) . "</div>\n";
1264 if ( $this->isConflict ) {
1265 $previewhead.='<h2>' . htmlspecialchars( wfMsg( 'previewconflict' ) ) . "</h2>\n";
1266 }
1267
1268 $parserOptions = ParserOptions::newFromUser( $wgUser );
1269 $parserOptions->setEditSection( false );
1270
1271 # don't parse user css/js, show message about preview
1272 # XXX: stupid php bug won't let us use $wgTitle->isCssJsSubpage() here
1273
1274 if ( $this->isCssJsSubpage ) {
1275 if(preg_match("/\\.css$/", $wgTitle->getText() ) ) {
1276 $previewtext = wfMsg('usercsspreview');
1277 } else if(preg_match("/\\.js$/", $wgTitle->getText() ) ) {
1278 $previewtext = wfMsg('userjspreview');
1279 }
1280 $parserOptions->setTidy(true);
1281 $parserOutput = $wgParser->parse( $previewtext , $wgTitle, $parserOptions );
1282 $wgOut->addHTML( $parserOutput->mText );
1283 wfProfileOut( $fname );
1284 return $previewhead;
1285 } else {
1286 # if user want to see preview when he edit an article
1287 if( $wgUser->getOption('previewonfirst') and ($this->textbox1 == '')) {
1288 $this->textbox1 = $this->mArticle->getContent();
1289 }
1290
1291 $toparse = $this->textbox1;
1292
1293 # If we're adding a comment, we need to show the
1294 # summary as the headline
1295 if($this->section=="new" && $this->summary!="") {
1296 $toparse="== {$this->summary} ==\n\n".$toparse;
1297 }
1298
1299 if ( $this->mMetaData != "" ) $toparse .= "\n" . $this->mMetaData ;
1300 $parserOptions->setTidy(true);
1301 $parserOutput = $wgParser->parse( $this->mArticle->preSaveTransform( $toparse ) ."\n\n",
1302 $wgTitle, $parserOptions );
1303
1304 $previewHTML = $parserOutput->getText();
1305 $wgOut->addParserOutputNoText( $parserOutput );
1306
1307 wfProfileOut( $fname );
1308 return $previewhead . $previewHTML;
1309 }
1310 }
1311
1312 /**
1313 * Call the stock "user is blocked" page
1314 */
1315 function blockedIPpage() {
1316 global $wgOut;
1317 $wgOut->blockedPage();
1318 }
1319
1320 /**
1321 * Produce the stock "please login to edit pages" page
1322 */
1323 function userNotLoggedInPage() {
1324 global $wgUser, $wgOut;
1325 $skin = $wgUser->getSkin();
1326
1327 $loginTitle = Title::makeTitle( NS_SPECIAL, 'Userlogin' );
1328 $loginLink = $skin->makeKnownLinkObj( $loginTitle, wfMsgHtml( 'loginreqlink' ), 'returnto=' . $this->mTitle->getPrefixedUrl() );
1329
1330 $wgOut->setPageTitle( wfMsg( 'whitelistedittitle' ) );
1331 $wgOut->setRobotPolicy( 'noindex,nofollow' );
1332 $wgOut->setArticleRelated( false );
1333
1334 $wgOut->addHtml( wfMsgWikiHtml( 'whitelistedittext', $loginLink ) );
1335 $wgOut->returnToMain( false, $this->mTitle->getPrefixedUrl() );
1336 }
1337
1338 /**
1339 * Creates a basic error page which informs the user that
1340 * they have to validate their email address before being
1341 * allowed to edit.
1342 */
1343 function userNotConfirmedPage() {
1344 global $wgOut;
1345
1346 $wgOut->setPageTitle( wfMsg( 'confirmedittitle' ) );
1347 $wgOut->setRobotPolicy( 'noindex,nofollow' );
1348 $wgOut->setArticleRelated( false );
1349
1350 $wgOut->addWikiText( wfMsg( 'confirmedittext' ) );
1351 $wgOut->returnToMain( false );
1352 }
1353
1354 /**
1355 * Produce the stock "your edit contains spam" page
1356 *
1357 * @param $match Text which triggered one or more filters
1358 */
1359 function spamPage( $match = false ) {
1360 global $wgOut;
1361
1362 $wgOut->setPageTitle( wfMsg( 'spamprotectiontitle' ) );
1363 $wgOut->setRobotPolicy( 'noindex,nofollow' );
1364 $wgOut->setArticleRelated( false );
1365
1366 $wgOut->addWikiText( wfMsg( 'spamprotectiontext' ) );
1367 if ( $match )
1368 $wgOut->addWikiText( wfMsg( 'spamprotectionmatch', "<nowiki>{$match}</nowiki>" ) );
1369
1370 $wgOut->returnToMain( false );
1371 }
1372
1373 /**
1374 * @private
1375 * @todo document
1376 */
1377 function mergeChangesInto( &$editText ){
1378 $fname = 'EditPage::mergeChangesInto';
1379 wfProfileIn( $fname );
1380
1381 $db =& wfGetDB( DB_MASTER );
1382
1383 // This is the revision the editor started from
1384 $baseRevision = Revision::loadFromTimestamp(
1385 $db, $this->mArticle->mTitle, $this->edittime );
1386 if( is_null( $baseRevision ) ) {
1387 wfProfileOut( $fname );
1388 return false;
1389 }
1390 $baseText = $baseRevision->getText();
1391
1392 // The current state, we want to merge updates into it
1393 $currentRevision = Revision::loadFromTitle(
1394 $db, $this->mArticle->mTitle );
1395 if( is_null( $currentRevision ) ) {
1396 wfProfileOut( $fname );
1397 return false;
1398 }
1399 $currentText = $currentRevision->getText();
1400
1401 if( wfMerge( $baseText, $editText, $currentText, $result ) ){
1402 $editText = $result;
1403 wfProfileOut( $fname );
1404 return true;
1405 } else {
1406 wfProfileOut( $fname );
1407 return false;
1408 }
1409 }
1410
1411 /**
1412 * Check if the browser is on a blacklist of user-agents known to
1413 * mangle UTF-8 data on form submission. Returns true if Unicode
1414 * should make it through, false if it's known to be a problem.
1415 * @return bool
1416 * @private
1417 */
1418 function checkUnicodeCompliantBrowser() {
1419 global $wgBrowserBlackList;
1420 if( empty( $_SERVER["HTTP_USER_AGENT"] ) ) {
1421 // No User-Agent header sent? Trust it by default...
1422 return true;
1423 }
1424 $currentbrowser = $_SERVER["HTTP_USER_AGENT"];
1425 foreach ( $wgBrowserBlackList as $browser ) {
1426 if ( preg_match($browser, $currentbrowser) ) {
1427 return false;
1428 }
1429 }
1430 return true;
1431 }
1432
1433 /**
1434 * Format an anchor fragment as it would appear for a given section name
1435 * @param string $text
1436 * @return string
1437 * @private
1438 */
1439 function sectionAnchor( $text ) {
1440 $headline = Sanitizer::decodeCharReferences( $text );
1441 # strip out HTML
1442 $headline = preg_replace( '/<.*?' . '>/', '', $headline );
1443 $headline = trim( $headline );
1444 $sectionanchor = '#' . urlencode( str_replace( ' ', '_', $headline ) );
1445 $replacearray = array(
1446 '%3A' => ':',
1447 '%' => '.'
1448 );
1449 return str_replace(
1450 array_keys( $replacearray ),
1451 array_values( $replacearray ),
1452 $sectionanchor );
1453 }
1454
1455 /**
1456 * Shows a bulletin board style toolbar for common editing functions.
1457 * It can be disabled in the user preferences.
1458 * The necessary JavaScript code can be found in style/wikibits.js.
1459 */
1460 function getEditToolbar() {
1461 global $wgStylePath, $wgContLang, $wgJsMimeType;
1462
1463 /**
1464 * toolarray an array of arrays which each include the filename of
1465 * the button image (without path), the opening tag, the closing tag,
1466 * and optionally a sample text that is inserted between the two when no
1467 * selection is highlighted.
1468 * The tip text is shown when the user moves the mouse over the button.
1469 *
1470 * Already here are accesskeys (key), which are not used yet until someone
1471 * can figure out a way to make them work in IE. However, we should make
1472 * sure these keys are not defined on the edit page.
1473 */
1474 $toolarray=array(
1475 array( 'image'=>'button_bold.png',
1476 'open' => "\'\'\'",
1477 'close' => "\'\'\'",
1478 'sample'=> wfMsg('bold_sample'),
1479 'tip' => wfMsg('bold_tip'),
1480 'key' => 'B'
1481 ),
1482 array( 'image'=>'button_italic.png',
1483 'open' => "\'\'",
1484 'close' => "\'\'",
1485 'sample'=> wfMsg('italic_sample'),
1486 'tip' => wfMsg('italic_tip'),
1487 'key' => 'I'
1488 ),
1489 array( 'image'=>'button_link.png',
1490 'open' => '[[',
1491 'close' => ']]',
1492 'sample'=> wfMsg('link_sample'),
1493 'tip' => wfMsg('link_tip'),
1494 'key' => 'L'
1495 ),
1496 array( 'image'=>'button_extlink.png',
1497 'open' => '[',
1498 'close' => ']',
1499 'sample'=> wfMsg('extlink_sample'),
1500 'tip' => wfMsg('extlink_tip'),
1501 'key' => 'X'
1502 ),
1503 array( 'image'=>'button_headline.png',
1504 'open' => "\\n== ",
1505 'close' => " ==\\n",
1506 'sample'=> wfMsg('headline_sample'),
1507 'tip' => wfMsg('headline_tip'),
1508 'key' => 'H'
1509 ),
1510 array( 'image'=>'button_image.png',
1511 'open' => '[['.$wgContLang->getNsText(NS_IMAGE).":",
1512 'close' => ']]',
1513 'sample'=> wfMsg('image_sample'),
1514 'tip' => wfMsg('image_tip'),
1515 'key' => 'D'
1516 ),
1517 array( 'image' =>'button_media.png',
1518 'open' => '[['.$wgContLang->getNsText(NS_MEDIA).':',
1519 'close' => ']]',
1520 'sample'=> wfMsg('media_sample'),
1521 'tip' => wfMsg('media_tip'),
1522 'key' => 'M'
1523 ),
1524 array( 'image' =>'button_math.png',
1525 'open' => "<math>",
1526 'close' => "<\\/math>",
1527 'sample'=> wfMsg('math_sample'),
1528 'tip' => wfMsg('math_tip'),
1529 'key' => 'C'
1530 ),
1531 array( 'image' =>'button_nowiki.png',
1532 'open' => "<nowiki>",
1533 'close' => "<\\/nowiki>",
1534 'sample'=> wfMsg('nowiki_sample'),
1535 'tip' => wfMsg('nowiki_tip'),
1536 'key' => 'N'
1537 ),
1538 array( 'image' =>'button_sig.png',
1539 'open' => '--~~~~',
1540 'close' => '',
1541 'sample'=> '',
1542 'tip' => wfMsg('sig_tip'),
1543 'key' => 'Y'
1544 ),
1545 array( 'image' =>'button_hr.png',
1546 'open' => "\\n----\\n",
1547 'close' => '',
1548 'sample'=> '',
1549 'tip' => wfMsg('hr_tip'),
1550 'key' => 'R'
1551 )
1552 );
1553 $toolbar = "<div id='toolbar'>\n";
1554 $toolbar.="<script type='$wgJsMimeType'>\n/*<![CDATA[*/\n";
1555
1556 foreach($toolarray as $tool) {
1557
1558 $image=$wgStylePath.'/common/images/'.$tool['image'];
1559 $open=$tool['open'];
1560 $close=$tool['close'];
1561 $sample = wfEscapeJsString( $tool['sample'] );
1562
1563 // Note that we use the tip both for the ALT tag and the TITLE tag of the image.
1564 // Older browsers show a "speedtip" type message only for ALT.
1565 // Ideally these should be different, realistically they
1566 // probably don't need to be.
1567 $tip = wfEscapeJsString( $tool['tip'] );
1568
1569 #$key = $tool["key"];
1570
1571 $toolbar.="addButton('$image','$tip','$open','$close','$sample');\n";
1572 }
1573
1574 $toolbar.="/*]]>*/\n</script>";
1575 $toolbar.="\n</div>";
1576 return $toolbar;
1577 }
1578
1579 /**
1580 * Output preview text only. This can be sucked into the edit page
1581 * via JavaScript, and saves the server time rendering the skin as
1582 * well as theoretically being more robust on the client (doesn't
1583 * disturb the edit box's undo history, won't eat your text on
1584 * failure, etc).
1585 *
1586 * @todo This doesn't include category or interlanguage links.
1587 * Would need to enhance it a bit, maybe wrap them in XML
1588 * or something... that might also require more skin
1589 * initialization, so check whether that's a problem.
1590 */
1591 function livePreview() {
1592 global $wgOut;
1593 $wgOut->disable();
1594 header( 'Content-type: text/xml' );
1595 header( 'Cache-control: no-cache' );
1596 # FIXME
1597 echo $this->getPreviewText( );
1598 /* To not shake screen up and down between preview and live-preview */
1599 echo "<br style=\"clear:both;\" />\n";
1600 }
1601
1602
1603 /**
1604 * Get a diff between the current contents of the edit box and the
1605 * version of the page we're editing from.
1606 *
1607 * If this is a section edit, we'll replace the section as for final
1608 * save and then make a comparison.
1609 *
1610 * @return string HTML
1611 */
1612 function getDiff() {
1613 require_once( 'DifferenceEngine.php' );
1614 $oldtext = $this->mArticle->fetchContent();
1615 $newtext = $this->mArticle->replaceSection(
1616 $this->section, $this->textbox1, $this->summary, $this->edittime );
1617 $oldtitle = wfMsgExt( 'currentrev', array('parseinline') );
1618 $newtitle = wfMsgExt( 'yourtext', array('parseinline') );
1619 if ( $oldtext !== false || $newtext != '' ) {
1620 $de = new DifferenceEngine( $this->mTitle );
1621 $de->setText( $oldtext, $newtext );
1622 $difftext = $de->getDiff( $oldtitle, $newtitle );
1623 } else {
1624 $difftext = '';
1625 }
1626
1627 return '<div id="wikiDiff">' . $difftext . '</div>';
1628 }
1629
1630 /**
1631 * Filter an input field through a Unicode de-armoring process if it
1632 * came from an old browser with known broken Unicode editing issues.
1633 *
1634 * @param WebRequest $request
1635 * @param string $field
1636 * @return string
1637 * @private
1638 */
1639 function safeUnicodeInput( $request, $field ) {
1640 $text = rtrim( $request->getText( $field ) );
1641 return $request->getBool( 'safemode' )
1642 ? $this->unmakesafe( $text )
1643 : $text;
1644 }
1645
1646 /**
1647 * Filter an output field through a Unicode armoring process if it is
1648 * going to an old browser with known broken Unicode editing issues.
1649 *
1650 * @param string $text
1651 * @return string
1652 * @private
1653 */
1654 function safeUnicodeOutput( $text ) {
1655 global $wgContLang;
1656 $codedText = $wgContLang->recodeForEdit( $text );
1657 return $this->checkUnicodeCompliantBrowser()
1658 ? $codedText
1659 : $this->makesafe( $codedText );
1660 }
1661
1662 /**
1663 * A number of web browsers are known to corrupt non-ASCII characters
1664 * in a UTF-8 text editing environment. To protect against this,
1665 * detected browsers will be served an armored version of the text,
1666 * with non-ASCII chars converted to numeric HTML character references.
1667 *
1668 * Preexisting such character references will have a 0 added to them
1669 * to ensure that round-trips do not alter the original data.
1670 *
1671 * @param string $invalue
1672 * @return string
1673 * @private
1674 */
1675 function makesafe( $invalue ) {
1676 // Armor existing references for reversability.
1677 $invalue = strtr( $invalue, array( "&#x" => "&#x0" ) );
1678
1679 $bytesleft = 0;
1680 $result = "";
1681 $working = 0;
1682 for( $i = 0; $i < strlen( $invalue ); $i++ ) {
1683 $bytevalue = ord( $invalue{$i} );
1684 if( $bytevalue <= 0x7F ) { //0xxx xxxx
1685 $result .= chr( $bytevalue );
1686 $bytesleft = 0;
1687 } elseif( $bytevalue <= 0xBF ) { //10xx xxxx
1688 $working = $working << 6;
1689 $working += ($bytevalue & 0x3F);
1690 $bytesleft--;
1691 if( $bytesleft <= 0 ) {
1692 $result .= "&#x" . strtoupper( dechex( $working ) ) . ";";
1693 }
1694 } elseif( $bytevalue <= 0xDF ) { //110x xxxx
1695 $working = $bytevalue & 0x1F;
1696 $bytesleft = 1;
1697 } elseif( $bytevalue <= 0xEF ) { //1110 xxxx
1698 $working = $bytevalue & 0x0F;
1699 $bytesleft = 2;
1700 } else { //1111 0xxx
1701 $working = $bytevalue & 0x07;
1702 $bytesleft = 3;
1703 }
1704 }
1705 return $result;
1706 }
1707
1708 /**
1709 * Reverse the previously applied transliteration of non-ASCII characters
1710 * back to UTF-8. Used to protect data from corruption by broken web browsers
1711 * as listed in $wgBrowserBlackList.
1712 *
1713 * @param string $invalue
1714 * @return string
1715 * @private
1716 */
1717 function unmakesafe( $invalue ) {
1718 $result = "";
1719 for( $i = 0; $i < strlen( $invalue ); $i++ ) {
1720 if( ( substr( $invalue, $i, 3 ) == "&#x" ) && ( $invalue{$i+3} != '0' ) ) {
1721 $i += 3;
1722 $hexstring = "";
1723 do {
1724 $hexstring .= $invalue{$i};
1725 $i++;
1726 } while( ctype_xdigit( $invalue{$i} ) && ( $i < strlen( $invalue ) ) );
1727
1728 // Do some sanity checks. These aren't needed for reversability,
1729 // but should help keep the breakage down if the editor
1730 // breaks one of the entities whilst editing.
1731 if ((substr($invalue,$i,1)==";") and (strlen($hexstring) <= 6)) {
1732 $codepoint = hexdec($hexstring);
1733 $result .= codepointToUtf8( $codepoint );
1734 } else {
1735 $result .= "&#x" . $hexstring . substr( $invalue, $i, 1 );
1736 }
1737 } else {
1738 $result .= substr( $invalue, $i, 1 );
1739 }
1740 }
1741 // reverse the transform that we made for reversability reasons.
1742 return strtr( $result, array( "&#x0" => "&#x" ) );
1743 }
1744
1745 function noCreatePermission() {
1746 global $wgOut;
1747 $wgOut->setPageTitle( wfMsg( 'nocreatetitle' ) );
1748 $wgOut->addWikiText( wfMsg( 'nocreatetext' ) );
1749 }
1750
1751 }
1752
1753 ?>