<?php

/*

 * Enano - an open-source CMS capable of wiki functions, Drupal-like sidebar blocks, and everything in between

 * Version 1.0.6 (Roane)

 * Copyright (C) 2006-2007 Dan Fuhry

 *

 * This program is Free Software; you can redistribute and/or modify it under the terms of the GNU General Public License

 * as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

 *

 * This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied

 * warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for details.

 */

/**

 * Fetch a value from the site configuration.

 * @param string The identifier of the value ("site_name" etc.)

 * @return string Configuration value, or bool(false) if the value is not set

 */

function getConfig($n)

{

  global $enano_config;

  if ( isset( $enano_config[ $n ] ) )

  {

    return $enano_config[$n];

  }

  else

  {

    return false;

  }

}

/**

 * Update or change a configuration value.

 * @param string The identifier of the value ("site_name" etc.)

 * @param string The new value

 * @return null

 */

function setConfig($n, $v)

{

  global $enano_config, $db;

  $enano_config[$n] = $v;

  $v = $db->escape($v);

  $e = $db->sql_query('DELETE FROM '.table_prefix.'config WHERE config_name=\''.$n.'\';');

  if ( !$e )

  {

    $db->_die('Error during generic setConfig() call row deletion.');

  }

  $e = $db->sql_query('INSERT INTO '.table_prefix.'config(config_name, config_value) VALUES(\''.$n.'\', \''.$v.'\')');

  if ( !$e )

  {

    $db->_die('Error during generic setConfig() call row insertion.');

  }

}

/**

 * Create a URI for an internal link.

 * @param string The full identifier of the page to link to (Special:Administration)

 * @param string The GET query string to append

 * @param bool   If true, perform htmlspecialchars() on the return value to make it HTML-safe

 * @return string

 */

function makeUrl($t, $query = false, $escape = false)

{

  global $db, $session, $paths, $template, $plugins; // Common objects

  $flags = '';

  $sep = urlSeparator;

  $t = sanitize_page_id($t);

  if ( isset($_GET['printable'] ) )

  {

    $flags .= $sep . 'printable=yes';

    $sep = '&';

  }

  if ( isset($_GET['theme'] ) )

  {

    $flags .= $sep . 'theme='.$session->theme;

    $sep = '&';

  }

  if ( isset($_GET['style'] ) ) {

    $flags .= $sep . 'style='.$session->style;

    $sep = '&';

  }

  $url = $session->append_sid(contentPath.$t.$flags);

  if($query)

  {

    $sep = strstr($url, '?') ? '&' : '?';

    $url = $url . $sep . $query;

  }

  return ($escape) ? htmlspecialchars($url) : $url;

}

/**

 * Create a URI for an internal link, and be namespace-friendly. Watch out for this one because it's different from most other Enano functions, in that the namespace is the first parameter.

 * @param string The namespace ID

 * @param string The page ID

 * @param string The GET query string to append

 * @param bool   If true, perform htmlspecialchars() on the return value to make it HTML-safe

 * @return string

 */

function makeUrlNS($n, $t, $query = false, $escape = false)

{

  global $db, $session, $paths, $template, $plugins; // Common objects

  $flags = '';

  if(defined('ENANO_BASE_CLASSES_INITIALIZED'))

  {

    $sep = urlSeparator;

  }

  else

  {

    $sep = (strstr($_SERVER['REQUEST_URI'], '?')) ? '&' : '?';

  }

  if ( isset( $_GET['printable'] ) ) {

    $flags .= $sep . 'printable';

    $sep = '&';

  }

  if ( isset( $_GET['theme'] ) )

  {

    $flags .= $sep . 'theme='.$session->theme;

    $sep = '&';

  }

  if ( isset( $_GET['style'] ) )

  {

    $flags .= $sep . 'style='.$session->style;

    $sep = '&';

  }

  if(defined('ENANO_BASE_CLASSES_INITIALIZED'))

  {

    $url = contentPath . $paths->nslist[$n] . $t . $flags;

  }

  else

  {

    // If the path manager hasn't been initted yet, take an educated guess at what the URI should be

    $url = contentPath . $n . ':' . $t . $flags;

  }

  if($query)

  {

    if(strstr($url, '?'))

    {

      $sep =  '&';

    }

    else

    {

      $sep = '?';

    }

    $url = $url . $sep . $query . $flags;

  }

  if(defined('ENANO_BASE_CLASSES_INITIALIZED'))

  {

    $url = $session->append_sid($url);

  }

  return ($escape) ? htmlspecialchars($url) : $url;

}

/**

 * Create a URI for an internal link, be namespace-friendly, and add http://hostname/scriptpath to the beginning if possible. Watch out for this one because it's different from most other Enano functions, in that the namespace is the first parameter.

 * @param string The namespace ID

 * @param string The page ID

 * @param string The GET query string to append

 * @param bool   If true, perform htmlspecialchars() on the return value to make it HTML-safe

 * @return string

 */

function makeUrlComplete($n, $t, $query = false, $escape = false)

{

  global $db, $session, $paths, $template, $plugins; // Common objects

  $flags = '';

  if(defined('ENANO_BASE_CLASSES_INITIALIZED'))

  {

    $sep = urlSeparator;

  }

  else

  {

    $sep = (strstr($_SERVER['REQUEST_URI'], '?')) ? '&' : '?';

  }

  if ( isset( $_GET['printable'] ) ) {

    $flags .= $sep . 'printable';

    $sep = '&';

  }

  if ( isset( $_GET['theme'] ) )

  {

    $flags .= $sep . 'theme='.$session->theme;

    $sep = '&';

  }

  if ( isset( $_GET['style'] ) )

  {

    $flags .= $sep . 'style='.$session->style;

    $sep = '&';

  }

  if(defined('ENANO_BASE_CLASSES_INITIALIZED'))

  {

    $url = $session->append_sid(contentPath . $paths->nslist[$n] . $t . $flags);

  }

  else

  {

    // If the path manager hasn't been initted yet, take an educated guess at what the URI should be

    $url = contentPath . $n . ':' . $t . $flags;

  }

  if($query)

  {

    if(strstr($url, '?')) $sep =  '&';

    else $sep = '?';

    $url = $url . $sep . $query . $flags;

  }

  $baseprot = 'http' . ( isset($_SERVER['HTTPS']) ? 's' : '' ) . '://' . $_SERVER['HTTP_HOST'];

  $url = $baseprot . $url;

  return ($escape) ? htmlspecialchars($url) : $url;

}

/**

 * Tells you the title for the given page ID string

 * @param string Page ID string (ex: Special:Administration)

 * @param bool Optional. If true, and if the namespace turns out to be something other than Article, the namespace prefix will be prepended to the return value.

 * @return string

 */

function get_page_title($page_id, $show_ns = true)

{

  global $db, $session, $paths, $template, $plugins; // Common objects

  $idata = RenderMan::strToPageID($page_id);

  $page_id_key = $paths->nslist[ $idata[1] ] . $idata[0];

  $page_id_key = sanitize_page_id($page_id_key);

  $page_data = $paths->pages[$page_id_key];

  $title = ( isset($page_data['name']) ) ?

    ( ( $page_data['namespace'] == 'Article' || !$show_ns ) ?

      '' :

      $paths->nslist[ $idata[1] ] )

    . $page_data['name'] :

    ( $show_ns ? $paths->nslist[$idata[1]] : '' ) . str_replace('_', ' ', dirtify_page_id( $idata[0] ) );

  return $title;

}

/**

 * Tells you the title for the given page ID and namespace

 * @param string Page ID

 * @param string Namespace

 * @return string

 */

function get_page_title_ns($page_id, $namespace)

{

  global $db, $session, $paths, $template, $plugins; // Common objects

  $page_id_key = $paths->nslist[ $namespace ] . $page_id;

  if ( isset($paths->pages[$page_id_key]) )

  {

    $page_data = $paths->pages[$page_id_key];

  }

  else

  {

    $page_data = array();

  }

  $title = ( isset($page_data['name']) ) ? $page_data['name'] : $paths->nslist[$namespace] . str_replace('_', ' ', dirtify_page_id( $page_id ) );

  return $title;

}

/**

 * Redirect the user to the specified URL.

 * @param string $url The URL, either relative or absolute.

 * @param string $title The title of the message

 * @param string $message A short message to show to the user

 * @param string $timeout Timeout, in seconds, to delay the redirect. Defaults to 3.

 */

function redirect($url, $title = 'Redirecting...', $message = 'Please wait while you are redirected.', $timeout = 3)

{

  global $db, $session, $paths, $template, $plugins; // Common objects

  if ( $timeout == 0 )

  {

    header('Location: ' . $url);

    header('HTTP/1.1 307 Temporary Redirect');

  }

  if ( !is_object($template) )

  {

    $template = new template_nodb();

    $template->load_theme('oxygen', 'bleu', false);

    $template->tpl_strings['SITE_NAME'] = 'Enano';

    $template->tpl_strings['SITE_DESC'] = 'This site is experiencing a critical error and cannot load.';

    $template->tpl_strings['COPYRIGHT'] = 'Powered by Enano CMS - &copy; 2007 Dan Fuhry. This program is Free Software; see the <a href="' . scriptPath . '/install.php?mode=license">GPL file</a> included with this package for details.';

    $template->tpl_strings['PAGE_NAME'] = htmlspecialchars($title);

  }

  $template->add_header('<meta http-equiv="refresh" content="' . $timeout . '; url=' . str_replace('"', '\\"', $url) . '" />');

  $template->add_header('<script type="text/javascript">

      function __r() {

        // FUNCTION AUTOMATICALLY GENERATED

        window.location="' . str_replace('"', '\\"', $url) . '";

      }

      setTimeout(\'__r();\', ' . $timeout . '000);

    </script>

    ');

  if ( get_class($template) == 'template_nodb' )

    $template->init_vars();

  $template->tpl_strings['PAGE_NAME'] = $title;

  $template->header(true);

  echo '<p>' . $message . '</p><p>If you are not redirected within ' . $timeout . ' seconds, <a href="' . str_replace('"', '\\"', $url) . '">please click here</a>.</p>';

  $template->footer(true);

  $db->close();

  exit(0);

}

/**

 * Generates a confirmation form if a CSRF check fails. Will terminate execution.

 */

function csrf_request_confirm()

{

	global $db, $session, $paths, $template, $plugins; // Common objects

	// If the token was overridden with the correct one, the user confirmed the action using this form. Continue exec.

	if ( isset($_POST['cstok']) || isset($_GET['cstok']) )

	{

		// using the if() check makes sure that the token isn't in a cookie, since $_REQUEST includes $_COOKIE.

		$token_check =& $_REQUEST['cstok'];

		if ( $token_check === $session->csrf_token )

		{

			// overridden token matches, continue exec

			return true;

		}

	}

	@ob_end_clean();

	$template->tpl_strings['PAGE_NAME'] = 'Invalid form confirmation key';

	$template->header();

	// initial info

	echo '<p>Your browser sent an invalid confirmation key for a form. Your session may have expired, or you may have been redirected here from a remote site in an attack known as Cross-Site Request Forgery (CSRF). If you are sure you want to continue with this action, you may click the button below. Otherwise, return to the main page and do not proceed.</p>';

	// start form

	$form_method = ( empty($_POST) ) ? 'get' : 'post';

	echo '<form action="' . htmlspecialchars($_SERVER['REQUEST_URI']) . '" method="' . $form_method . '" enctype="multipart/form-data">';

	echo '<fieldset enano:expand="closed">';

	echo '<legend>View request and form data</legend><div>';

	if ( empty($_POST) )

	{

		// GET request

		echo csrf_confirm_get_recursive();

	}

	else

	{

		// POST request

		echo csrf_confirm_post_recursive();

	}

	echo '</div></fieldset>';

	// insert the right CSRF token

	echo '<input type="hidden" name="cstok" value="' . $session->csrf_token . '" />';

	echo '<p><input type="submit" value="Continue" /></p>';

	echo '</form><script type="text/javascript">addOnloadHook(function(){load_component(\'expander\');});</script>';

	$template->footer();

	exit;

}

function csrf_confirm_get_recursive($_inner = false, $pfx = false, $data = false)

{

	// make posted arrays work right

	if ( !$data )

		( $_inner == 'post' ) ? $data =& $_POST : $data =& $_GET;

	foreach ( $data as $key => $value )

	{

		$pfx_this = ( empty($pfx) ) ? $key : "{$pfx}[{$key}]";

		if ( is_array($value) )

		{

			csrf_confirm_get_recursive(true, $pfx_this, $value);

		}

		else if ( empty($value) )

		{

			echo htmlspecialchars($pfx_this . " = <nil>") . "<br />\n";

			echo '<input type="hidden" name="' . htmlspecialchars($pfx_this) . '" value="" />';

		}

		else

		{

			echo htmlspecialchars($pfx_this . " = " . $value) . "<br />\n";

			echo '<input type="hidden" name="' . htmlspecialchars($pfx_this) . '" value="' . htmlspecialchars($value) . '" />';

		}

	}

}

function csrf_confirm_post_recursive()

{

	csrf_confirm_get_recursive('post');

}

// Removed wikiFormat() from here, replaced with RenderMan::render

/**

 * Tell me if the page exists or not.

 * @param string the full page ID (Special:Administration) of the page to check for

 * @return bool True if the page exists, false otherwise

 */

function isPage($p) {

  global $db, $session, $paths, $template, $plugins; // Common objects

  // Try the easy way first ;-)

  if ( isset( $paths->pages[ $p ] ) )

  {

    return true;

  }

  // Special case for Special, Template, and Admin pages that can't have slashes in their URIs

  $ns_test = RenderMan::strToPageID( $p );

  if($ns_test[1] != 'Special' && $ns_test[1] != 'Template' && $ns_test[1] != 'Admin')

  {

    return false;

  }

  $particles = explode('/', $p);

  if ( isset ( $paths->pages[ $particles[ 0 ] ] ) )

  {

    return true;

  }

  else

  {

    return false;

  }

}

/**

 * These are some old functions that were used with the Midget codebase. They are deprecated and should not be used any more.

 */

function arrayItemUp($arr, $keyname) {

  $keylist = array_keys($arr);

  $keyflop = array_flip($keylist);

  $idx = $keyflop[$keyname];

  $idxm = $idx - 1;

  $temp = $arr[$keylist[$idxm]];

  if($arr[$keylist[0]] == $arr[$keyname]) return $arr;

  $arr[$keylist[$idxm]] = $arr[$keylist[$idx]];

  $arr[$keylist[$idx]] = $temp;

  return $arr;

}

function arrayItemDown($arr, $keyname) {

  $keylist = array_keys($arr);

  $keyflop = array_flip($keylist);

  $idx = $keyflop[$keyname];

  $idxm = $idx + 1;

  $temp = $arr[$keylist[$idxm]];

  $sz = sizeof($arr); $sz--;

  if($arr[$keylist[$sz]] == $arr[$keyname]) return $arr;

  $arr[$keylist[$idxm]]  =  $arr[$keylist[$idx]];

  $arr[$keylist[$idx]]   =  $temp;

  return $arr;

}

function arrayItemTop($arr, $keyname) {

  $keylist = array_keys($arr);

  $keyflop = array_flip($keylist);

  $idx = $keyflop[$keyname];

  while( $orig != $arr[$keylist[0]] ) {

    // echo 'Keyname: '.$keylist[$idx] . '<br />'; flush(); ob_flush(); // Debugger

    if($idx < 0) return $arr;

    if($keylist[$idx] == '' || $keylist[$idx] < 0 || !$keylist[$idx]) {

      /* echo 'Infinite loop caught in arrayItemTop(<br /><pre>';

      print_r($arr);

      echo '</pre><br />, '.$keyname.');<br /><br />EnanoCMS: Critical error during function call, exiting to prevent excessive server load.';

      exit; */

      return $arr;

    }

    $arr = arrayItemUp($arr, $keylist[$idx]);

    $idx--;

  }

  return $arr;

}

function arrayItemBottom($arr, $keyname) {

  $keylist = array_keys($arr);