<?php

/*

 * Enano - an open-source CMS capable of wiki functions, Drupal-like sidebar blocks, and everything in between

 * Version 1.0.3 (Dyrad)

 * Copyright (C) 2006-2007 Dan Fuhry

 * render.php - handles fetching pages and parsing them into HTML

 *

 * This program is Free Software; you can redistribute and/or modify it under the terms of the GNU General Public License

 * as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

 *

 * This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied

 * warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for details.

 */

class RenderMan {

  function strToPageID($string)

  {

    global $db, $session, $paths, $template, $plugins; // Common objects

    $k = array_keys($paths->nslist);

    $proj_alt = 'Project:';

    if ( substr($string, 0, (strlen($proj_alt))) == $proj_alt )

    {

      $ns = 'Project';

      $pg = substr($string, strlen($proj_alt), strlen($string));

      return Array($pg, $ns);

    }

    for($i=0;$i<sizeof($paths->nslist);$i++)

    {

      $ln = strlen($paths->nslist[$k[$i]]);

      if(substr($string, 0, $ln) == $paths->nslist[$k[$i]])

      {

        $ns = $k[$i];

        $pg = substr($string, strlen($paths->nslist[$ns]), strlen($string));

      }

    }

    return Array($pg, $ns);

  }

  function getPage($page_id, $namespace, $wiki = 1, $smilies = true, $filter_links = true, $redir = true, $render = true)

  {

    global $db, $session, $paths, $template, $plugins; // Common objects

    $perms =& $session;

    {

      unset($perms);

      unset($perms); // PHP <5.1.5 Zend bug

      $perms = $session->fetch_page_acl($page_id, $namespace);

    }

    if(!$perms->get_permissions('read'))

      return 'Access denied ('.$paths->nslist[$namespace].$page_id.')';

    if($wiki == 0 || $render == false)

    {

      if(!$perms->get_permissions('view_source'))

      {

        return 'Access denied ('.$paths->nslist[$namespace].$page_id.')';

      }

    }

    $q = $db->sql_query('SELECT page_text,char_tag FROM '.table_prefix.'page_text WHERE page_id=\''.$db->escape($page_id).'\' AND namespace=\''.$db->escape($namespace).'\';');

    if ( !$q )

    {

      $db->_die('Method called was: RenderMan::getPage(\''.$page_id.'\', \''.$namespace.'\');.');

    }

    if ( $db->numrows() < 1 )

    {

      return false;

    }

    $row = $db->fetchrow();

    $db->free_result();

    $message = $row['page_text'];

    $chartag = $row['char_tag'];

    unset($row); // Free some memory

    if ( preg_match("#^\#redirect \[\[([^\]\r\n\a\t]+?)\]\]#", $message, $m) && $redir && ( !isset($_GET['redirect']) || ( isset($_GET['redirect']) && $_GET['redirect'] != 'no' ) ) )

    {

      $old = $paths->cpage;

      $a = RenderMan::strToPageID($m[1]);

      $a[0] = str_replace(' ', '_', $a[0]);

      $pageid = str_replace(' ', '_', $paths->nslist[$a[1]] . $a[0]);

      $paths->page = $pageid;

      $paths->cpage = $paths->pages[$pageid];

      //die('<pre>'.print_r($paths->cpage,true).'</pre>');

      unset($template);

      unset($GLOBALS['template']);

      $GLOBALS['template'] = new template();

      global $template;

      $template->template(); // Tear down and rebuild the template parser

      $template->load_theme($session->theme, $session->style);

      $data = '<div><small>(Redirected from <a href="'.makeUrlNS($old['namespace'], $old['urlname_nons'], 'redirect=no', true).'">'.$old['name'].'</a>)</small></div>'.RenderMan::getPage($a[0], $a[1], $wiki, $smilies, $filter_links, false /* Enforces a maximum of one redirect */);

      return $data;

    }

    else if(preg_match('#^\#redirect \[\[(.+?)\]\]#', $message, $m) && isset($_GET['redirect']) && $_GET['redirect'] == 'no')

    {

      preg_match('#^\#redirect \[\[(.+)\]\]#', $message, $m);

      $m[1] = str_replace(' ', '_', $m[1]);

      $message = preg_replace('#\#redirect \[\[(.+)\]\]#', '<nowiki><div class="mdg-infobox"><table border="0" width="100%" cellspacing="0" cellpadding="0"><tr><td valign="top"><img alt="Cute wet-floor icon" src="'.scriptPath.'/images/redirector.png" /></td><td valign="top" style="padding-left: 10px;"><b>This page is a <i>redirector</i>.</b><br />This means that this page will not show its own content by default. Instead it will display the contents of the page it redirects to.<br /><br />To create a redirect page, make the <i>first characters</i> in the page content <tt>#redirect [[Page_ID]]</tt>. For more information, see the Enano <a href="http://enanocms.org/Help:Wiki_formatting">Wiki formatting guide</a>.<br /><br />This page redirects to <a href="'.makeUrl($m[1]).'">'.$paths->pages[$m[1]]['name'].'</a>.</td></tr></table></div><br /><hr style="margin-left: 1em; width: 200px;" /></nowiki>', $message);

    }

    $session->disallow_password_grab();

    return ($render) ? RenderMan::render($message, $wiki, $smilies, $filter_links) : $message;

  }

  function getTemplate($id, $parms)

  {

    global $db, $session, $paths, $template, $plugins; // Common objects

    if(!isset($paths->pages[$paths->nslist['Template'].$id])) 

    {

      return '[['.$paths->nslist['Template'].$id.']]';

    }

    if(isset($paths->template_cache[$id]))

    {

      $text = $paths->template_cache[$id];

    }

    else

    {

      $text = RenderMan::getPage($id, 'Template', 0, true, true, 0);

      $paths->template_cache[$id] = $text;

    }

    $text = preg_replace('/<noinclude>(.*?)<\/noinclude>/is', '', $text);

    $text = preg_replace('/<nodisplay>(.*?)<\/nodisplay>/is', '\\1', $text);

    preg_match_all('#\(_([0-9]+)_\)#', $text, $matchlist);

    foreach($matchlist[1] as $m)

    {

      if(isset($parms[((int)$m)+1])) 

      {

        $p = $parms[((int)$m)+1];

      }

      else

      {

        $p = '<b>Notice:</b> RenderMan::getTemplate(): Parameter '.$m.' is not set';

      }

      $text = str_replace('(_'.$m.'_)', $p, $text);

    }

    $text = RenderMan::include_templates($text);

    return $text;

  }

  function fetch_template_text($id)

  {

    global $db, $session, $paths, $template, $plugins; // Common objects

    if(!isset($paths->pages[$paths->nslist['Template'].$id])) 

    {

      return '[['.$paths->nslist['Template'].$id.']]';

    }

    if(isset($paths->template_cache[$id]))

    {

      $text = $paths->template_cache[$id];

    }

    else

    {

      $text = RenderMan::getPage($id, 'Template', 0, false, false, false, false);

      $paths->template_cache[$id] = $text;

    }

    if ( is_string($text) )

    {

      $text = preg_replace('/<noinclude>(.*?)<\/noinclude>/is', '', $text);

      $text = preg_replace('/<nodisplay>(.*?)<\/nodisplay>/is', '\\1', $text);

    }

    return $text;

  }

  function render($text, $wiki = 1, $smilies = true, $filter_links = true)

  {

    global $db, $session, $paths, $template, $plugins; // Common objects

    if($smilies)

    {

      $text = RenderMan::smilieyize($text);

    }

    if($wiki == 1)

    {

      $text = RenderMan::next_gen_wiki_format($text);

    }

    elseif($wiki == 2)

    {

      $text = $template->tplWikiFormat($text);

    }

    return $text;

  }

  function PlainTextRender($text, $wiki = 1, $smilies = false, $filter_links = true)

  {

    global $db, $session, $paths, $template, $plugins; // Common objects

    if($smilies)

    {

      $text = RenderMan::smilieyize($text);

    }

    if($wiki == 1)

    {

      $text = RenderMan::next_gen_wiki_format($text, true);

    }

    elseif($wiki == 2)

    {

      $text = $template->tplWikiFormat($text);

    }

    return $text;

  }

  function next_gen_wiki_format($text, $plaintext = false, $filter_links = true, $do_params = false)

  {

    global $db, $session, $paths, $template, $plugins; // Common objects

    $random_id = md5( time() . mt_rand() );

    // Strip out <nowiki> sections and PHP code

    $php = preg_match_all('#<\?php(.*?)\?>#is', $text, $phpsec);

    for($i=0;$i<sizeof($phpsec[1]);$i++)

    {

      $text = str_replace('<?php'.$phpsec[1][$i].'?>', '{PHP:'.$random_id.':'.$i.'}', $text);

    }

    $nw = preg_match_all('#<nowiki>(.*?)<\/nowiki>#is', $text, $nowiki);

    for($i=0;$i<sizeof($nowiki[1]);$i++)

    {

      $text = str_replace('<nowiki>'.$nowiki[1][$i].'</nowiki>', '{NOWIKI:'.$random_id.':'.$i.'}', $text);

    }

    $text = preg_replace('/<noinclude>(.*?)<\/noinclude>/is', '\\1', $text);

    if ( $paths->namespace == 'Template' )

    {

      $text = preg_replace('/<nodisplay>(.*?)<\/nodisplay>/is', '', $text);

    }

    $code = $plugins->setHook('render_wikiformat_pre');

    foreach ( $code as $cmd )

    {

      eval($cmd);

    }

    if ( !$plaintext )

    {

      // Process images

      $text = RenderMan::process_image_tags($text, $taglist);

      $text = RenderMan::process_imgtags_stage2($text, $taglist);

    }

    if($do_params)

    {

      preg_match_all('#\(_([0-9]+)_\)#', $text, $matchlist);

      foreach($matchlist[1] as $m)

      {

        $text = str_replace('(_'.$m.'_)', $paths->getParam((int)$m), $text);

      }

    }

    //$template_regex = "/\{\{([^\]]+?)((\n([ ]*?)[A-z0-9]+([ ]*?)=([ ]*?)(.+?))*)\}\}/is";

    $template_regex = "/\{\{(.+)((\n|\|[ ]*([A-z0-9]+)[ ]*=[ ]*(.+))*)\}\}/isU";

    $i = 0;

    while ( preg_match($template_regex, $text) )

    {

      $i++;

      if ( $i == 5 )

        break;

      $text = RenderMan::include_templates($text);

    }

    $text = process_tables($text);

    $text = RenderMan::parse_internal_links($text);

    $wiki =& Text_Wiki::singleton('Mediawiki');

    if($plaintext)

    {

      $wiki->setRenderConf('Plain', 'wikilink', 'view_url', contentPath);

      $result = $wiki->transform($text, 'Plain');

    }

    else

    {

      $wiki->setRenderConf('Xhtml', 'wikilink', 'view_url', contentPath);

      $wiki->setRenderConf('Xhtml', 'Url', 'css_descr', 'external');

      $result = $wiki->transform($text, 'Xhtml');

    }

    // HTML fixes

    $result = preg_replace('#<tr>([\s]*?)<\/tr>#is', '', $result);

    $result = preg_replace('#<p>([\s]*?)<\/p>#is', '', $result);

    $result = preg_replace('#<br />([\s]*?)<table#is', '<table', $result);

    $result = str_replace("<pre><code>\n", "<pre><code>", $result);

    $result = preg_replace("/<p><table([^>]*?)><\/p>/", "<table\\1>", $result);

    $result = str_replace("<br />\n</td>", "\n</td>", $result);

    $result = str_replace("<p><tr>", "<tr>", $result);

    $result = str_replace("<tr><br />", "<tr>", $result);

    $result = str_replace("</tr><br />", "</tr>", $result);

    $result = str_replace("</table><br />", "</table>", $result);

    $result = preg_replace('/<\/table>$/', "</table><br /><br />", $result);

    $result = str_replace("<p></div></p>", "</div>", $result);

    $result = str_replace("<p></table></p>", "</table>", $result);

    $code = $plugins->setHook('render_wikiformat_post');

    foreach ( $code as $cmd )

    {

      eval($cmd);

    }

    // Reinsert <nowiki> sections

    for($i=0;$i<$nw;$i++)

    {

      $result = str_replace('{NOWIKI:'.$random_id.':'.$i.'}', $nowiki[1][$i], $result);

    }

    // Reinsert PHP

    for($i=0;$i<$php;$i++)

    {

      $result = str_replace('{PHP:'.$random_id.':'.$i.'}', '<?php'.$phpsec[1][$i].'?>', $result);

    }

    return $result;

  }

  function wikiFormat($message, $filter_links = true, $do_params = false, $plaintext = false)

  {

    global $db, $session, $paths, $template, $plugins; // Common objects

    return RenderMan::next_gen_wiki_format($message, $plaintext, $filter_links, $do_params);

    $random_id = md5( time() . mt_rand() );

    // Strip out <nowiki> sections

    $nw = preg_match_all('#<nowiki>(.*?)<\/nowiki>#is', $message, $nowiki);

    if(!$plaintext)

    {

      //return '<pre>'.print_r($nowiki,true).'</pre>';

      for($i=0;$i<sizeof($nowiki[1]);$i++)

      {

        $message = str_replace('<nowiki>'.$nowiki[1][$i].'</nowiki>', '{NOWIKI:'.$random_id.':'.$i.'}', $message);

      }

      $message = preg_replace('/<noinclude>(.*?)<\/noinclude>/is', '\\1', $message);

      //return '<pre>'.htmlspecialchars($message).'</pre>';

      $message = RenderMan::process_image_tags($message);

    }

    if($do_params)

    {

      preg_match_all('#\(_([0-9]+)_\)#', $message, $matchlist);

      foreach($matchlist[1] as $m)

      {

        $message = str_replace('(_'.$m.'_)', $paths->getParam((int)$m), $message);

      }

    }

    $message = RenderMan::include_templates($message);

    // Reinsert <nowiki> sections

    for($i=0;$i<$nw;$i++)

    {

      $message = str_replace('{NOWIKI:'.$random_id.':'.$i.'}', '<nowiki>'.$nowiki[1][$i].'</nowiki>', $message);

    }

    $message = process_tables($message);

    //if($message2 != $message) return '<pre>'.htmlspecialchars($message2).'</pre>';

    //$message = str_replace(array('<table>', '</table>'), array('<nowiki><table>', '</table></nowiki>'), $message);

    $wiki =& Text_Wiki::singleton('Mediawiki');

    if($plaintext)

    {

      $wiki->setRenderConf('Plain', 'wikilink', 'view_url', contentPath);

      $result = $wiki->transform($message, 'Plain');

    } else {

      $wiki->setRenderConf('Xhtml', 'wikilink', 'view_url', contentPath);

      $wiki->setRenderConf('Xhtml', 'Url', 'css_descr', 'external');

      $result = $wiki->transform($message, 'Xhtml');

    }

    // HTML fixes

    $result = preg_replace('#<tr>([\s]*?)<\/tr>#is', '', $result);

    $result = preg_replace('#<p>([\s]*?)<\/p>#is', '', $result);

    $result = preg_replace('#<br />([\s]*?)<table#is', '<table', $result);

    $result = str_replace("<pre><code>\n", "<pre><code>", $result);

    $result = preg_replace("/<p><table([^>]*?)><\/p>/", "<table\\1>", $result);

    $result = str_replace("<br />\n</td>", "\n</td>", $result);

    $result = str_replace("<p><tr>", "<tr>", $result);

    $result = str_replace("<tr><br />", "<tr>", $result);

    $result = str_replace("</tr><br />", "</tr>", $result);

    $result = str_replace("</table></p>", "</table>", $result);

    $result = str_replace("</table><br />", "</table>", $result);

    $result = preg_replace('/<\/table>$/', "</table><br /><br />", $result);

    $result = str_replace("<p></div></p>", "</div>", $result);

    $result = str_replace("<p></table></p>", "</table>", $result);

    $result = str_replace('<nowiki>',  '&lt;nowiki&gt;',  $result);

    $result = str_replace('</nowiki>', '&lt;/nowiki&gt;', $result);

    return $result;

  }

  function destroy_javascript($message, $_php = false)

  {

    $message = preg_replace('#<(script|object|applet|embed|iframe|frame|form|input|select)(.*?)>#is', '&lt;\\1\\2&gt;', $message);

    $message = preg_replace('#</(script|object|applet|embed|iframe|frame|form|input|select)(.*?)>#is', '&lt;/\\1\\2&gt;', $message);

    $message = preg_replace('#(javascript|script|activex|chrome|about|applet):#is', '\\1:', $message);

    if ( $_php )

    {

      // Left in only for compatibility

      $message = preg_replace('#&lt;(.*?)>#is', '<\\1>', $message);

      $message = preg_replace('#<(.*?)&gt;#is', '<\\1>', $message);

      $message = preg_replace('#<(\?|\?php|%)(.*?)(\?|%)>#is', '&lt;\\1\\2\\3&gt;', $message);

      // strip <a href="foo" onclick="bar();">-type attacks

      $message = preg_replace('#<([a-zA-Z:\-]+) (.*?)on([A-Za-z]*)=(.*?)>#is', '&lt;\\1\\2on\\3=\\4&gt;', $message);

    }

    return $message;

  }

  function strip_php($message)

  {

    return RenderMan::destroy_javascript($message, true);

  }

  function sanitize_html($text)

  {

    $text = htmlspecialchars($text);

    $allowed_tags = Array('b', 'i', 'u', 'pre', 'code', 'tt', 'br', 'p', 'nowiki', '!--([\w\W]+)--');

    foreach($allowed_tags as $t)

    {

      $text = preg_replace('#&lt;'.$t.'&gt;(.*?)&lt;/'.$t.'&gt;#is', '<'.$t.'>\\1</'.$t.'>', $text);

      $text = preg_replace('#&lt;'.$t.' /&gt;#is', '<'.$t.' />', $text);

      $text = preg_replace('#&lt;'.$t.'&gt;#is', '<'.$t.'>', $text);

    }

    return $text;

  }

  /**

   * Parses internal links (wikilinks) in a block of text.

   * @param string Text to process

   * @return string

   */

  function parse_internal_links($text)

  {

    global $db, $session, $paths, $template, $plugins; // Common objects

    // stage 1 - links with alternate text

    preg_match_all('/\[\[([^\[\]<>\{\}\|]+)\|(.+?)\]\]/', $text, $matches);

    foreach ( $matches[0] as $i => $match )

    {

      list($page_id, $namespace) = RenderMan::strToPageID($matches[1][$i]);

      $pid_clean = $paths->nslist[$namespace] . sanitize_page_id($page_id);

      $url = makeUrl($pid_clean, false, true);

      $inner_text = $matches[2][$i];

      $quot = '"';

      $exists = ( isPage($pid_clean) ) ? '' : ' class="wikilink-nonexistent"';

      $link = "<a href={$quot}{$url}{$quot}{$exists}>{$inner_text}</a>";

      $text = str_replace($match, $link, $text);

    }

    // stage 2 - links with no alternate text

    preg_match_all('/\[\[([^\[\]<>\{\}\|]+)\]\]/', $text, $matches);

    foreach ( $matches[0] as $i => $match )

    {

      list($page_id, $namespace) = RenderMan::strToPageID($matches[1][$i]);

      $pid_clean = $paths->nslist[$namespace] . sanitize_page_id($page_id);

      $url = makeUrl($pid_clean, false, true);

      $inner_text = ( isPage($pid_clean) ) ? htmlspecialchars(get_page_title($pid_clean)) : htmlspecialchars($matches[1][$i]);

      $quot = '"';

      $exists = ( isPage($pid_clean) ) ? '' : ' class="wikilink-nonexistent"';

      $link = "<a href={$quot}{$url}{$quot}{$exists}>{$inner_text}</a>";

      $text = str_replace($match, $link, $text);

    }

    return $text;

  }

  /**

   * Parses a partial template tag in wikitext, and return an array with the parameters.

   * @param string The portion of the template tag that contains the parameters.

   * @example

   * <code>

   foo = lorem ipsum

   bar = dolor sit amet

   * </code>

   * @return array Example:

   * [foo] => lorem ipsum

   * [bar] => dolor sit amet

   */

  function parse_template_vars($input)

  {

    if ( !preg_match('/^(\|[ ]*([A-z0-9_]+)([ ]*)=([ ]*)(.+?))*$/is', trim($input)) )

    {

      $using_pipes = false;

      $input = explode("\n", trim( $input ));

    }

    else

    {

      $using_pipes = true;

      $input = substr($input, 1);

      $input = explode("|", trim( $input ));

    }