Enano CMS (1.1.x): comparison includes/template.php

equal deleted inserted replaced

-:63e131c38876
+:26479224936a
 * warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for details.
 */
 class template
 {
-var $tpl_strings, $tpl_bool, $theme, $style, $no_headers, $additional_headers, $sidebar_extra, $sidebar_widgets, $toolbar_menu, $theme_list, $named_theme_list, $default_theme, $default_style, $plugin_blocks, $namespace_string, $style_list, $theme_loaded;
+var $tpl_strings, $tpl_bool, $vars_assign_history, $theme, $style, $no_headers, $additional_headers, $sidebar_extra, $sidebar_widgets, $toolbar_menu, $theme_list, $named_theme_list, $default_theme, $default_style, $plugin_blocks, $namespace_string, $style_list, $theme_loaded;
 /**
 * The list of themes that are critical for Enano operation. This doesn't include oxygen which
 * remains a user theme. By default this is admin and printable which have to be loaded on demand.
 * @var array
 <a style="background-image: none; padding-right: 0;" href="http://enanocms.org/" onclick="window.open(this.href); return false;"><img style="border-width: 0;" alt=" " src="'.scriptPath.'/images/about-powered-enano.png" onmouseover="domOpacity(this, 100, 0, 500);" onmouseout="domOpacity(this, 0, 100, 500);" /></a>
 </div>';
 $this->theme_list = Array();
 $this->named_theme_list = Array();
+$this->vars_assign_history = array(
+'strings' => array(),
+'bool' => array()
+);
 if ( defined('IN_ENANO_UPGRADE') )
 {
 return $this->construct_compat();
 }
 // The list of styles for the currently selected theme
 $this->style_list =& $this->named_theme_list[ $this->theme ]['css'];
 $this->theme_loaded = true;
 }
-function init_vars()
+/**
+* Initializes all variables related to on-page content. This includes sidebars and what have you.
+* @param object Optional PageProcessor object to use for passing metadata and permissions on. If omitted, uses information from $paths and $session.
+*/
+function init_vars($page = false)
 {
 global $db, $session, $paths, $template, $plugins; // Common objects
 global $email;
 global $lang;
 if(!$this->theme || !$this->style)
 {
 $this->load_theme();
 }
-if(defined('ENANO_TEMPLATE_LOADED'))
+if ( defined('ENANO_TEMPLATE_LOADED') )
 {
-die_semicritical('Illegal call', '<p>$template->load_theme was called multiple times, this is not supposed to happen. Exiting with fatal error.</p>');
+// trigger_error("\$template->init_vars() called more than once", E_USER_WARNING);
-}
+// die_semicritical('Illegal call', '<p>$template->init_vars() was called multiple times, this is not supposed to happen. Exiting with fatal error.</p>');
+}
-define('ENANO_TEMPLATE_LOADED', '');
+else
+{
+@define('ENANO_TEMPLATE_LOADED', '');
+}
+if ( is_object($page) && @get_class($page) == 'PageProcessor' )
+{
+$page_append = substr($paths->fullpage, strlen($paths->page));
+if ( isset($paths->nslist[$page->namespace]) )
+{
+$local_page = $paths->nslist[$page->namespace] . $page->page_id;
+}
+else
+{
+$local_page = $page->namespace . substr($paths->nslist['Special'], -1) . $page->page_id . $page_append;
+}
+$local_fullpage = $local_page . $page_append;
+$local_page_id =& $page->page_id;
+$local_namespace =& $page->namespace;
+$perms =& $page->perms;
+}
+else
+{
+$local_page =& $paths->page;
+$local_page_id =& $paths->page_id;
+$local_fullpage =& $paths->fullpage;
+$local_namespace =& $paths->namespace;
+$perms =& $session;
+}
 $tplvars = $this->extract_vars('elements.tpl');
 if(isset($_SERVER['HTTP_USER_AGENT']) && strstr($_SERVER['HTTP_USER_AGENT'], 'MSIE'))
 {
 <![endif]-->
 ');
 }
 // Get the "article" button text (depends on namespace)
-switch($paths->namespace) {
+switch($local_namespace) {
 case "Article":
 default:
 $ns = $lang->get('onpage_lbl_page_article');
 break;
 case "Admin":
 // Create "xx page" button
 $btn_selected = ( isset($tplvars['toolbar_button_selected'])) ? $tplvars['toolbar_button_selected'] : $tplvars['toolbar_button'];
 $parser = $this->makeParserText($btn_selected);
-if ( true || !$paths->anonymous_page )
+$parser->assign_vars(array(
-{
+'FLAGS' => 'onclick="if ( !KILL_SWITCH ) { void(ajaxReset()); return false; }" title="' . $lang->get('onpage_tip_article') . '" accesskey="a"',
-$parser->assign_vars(array(
+'PARENTFLAGS' => 'id="mdgToolbar_article"',
-'FLAGS' => 'onclick="if ( !KILL_SWITCH ) { void(ajaxReset()); return false; }" title="' . $lang->get('onpage_tip_article') . '" accesskey="a"',
+'HREF' => makeUrl($local_page, null, true),
-'PARENTFLAGS' => 'id="mdgToolbar_article"',
+'TEXT' => $this->namespace_string
-'HREF' => makeUrl($paths->page, null, true),
+));
-'TEXT' => $this->namespace_string
-));
+$tb .= $parser->run();
-$tb .= $parser->run();
-}
 $button = $this->makeParserText($tplvars['toolbar_button']);
 // Page toolbar
 // Comments button
-if ( $session->get_permissions('read') && getConfig('enable_comments')=='1' && $paths->namespace != 'Special' && $paths->namespace != 'Admin' && $paths->cpage['comments_on'] == 1 )
+if ( $perms->get_permissions('read') && getConfig('enable_comments')=='1' && $local_namespace != 'Special' && $local_namespace != 'Admin' && $paths->cpage['comments_on'] == 1 )
 {
-$e = $db->sql_query('SELECT approved FROM '.table_prefix.'comments WHERE page_id=\''.$paths->page_id.'\' AND namespace=\''.$paths->namespace.'\';');
+$e = $db->sql_query('SELECT approved FROM '.table_prefix.'comments WHERE page_id=\''.$local_page_id.'\' AND namespace=\''.$local_namespace.'\';');
 if ( !$e )
 {
 $db->_die();
 }
 $nc = $db->numrows();
 $na++;
 }
 }
 $db->free_result();
-$n = ( $session->get_permissions('mod_comments') ) ? (string)$nc : (string)$na;
+$n = ( $perms->get_permissions('mod_comments') ) ? (string)$nc : (string)$na;
-if ( $session->get_permissions('mod_comments') && $nu > 0 )
+if ( $perms->get_permissions('mod_comments') && $nu > 0 )
 {
 $subst = array(
 'num_comments' => $nc,
 'num_unapp' => $nu
 );
 }
 $button->assign_vars(array(
 'FLAGS' => 'onclick="if ( !KILL_SWITCH ) { void(ajaxComments()); return false; }" title="' . $lang->get('onpage_tip_comments') . '" accesskey="c"',
 'PARENTFLAGS' => 'id="mdgToolbar_discussion"',
-'HREF' => makeUrl($paths->page, 'do=comments', true),
+'HREF' => makeUrl($local_page, 'do=comments', true),
 'TEXT' => $btn_text,
 ));
 $tb .= $button->run();
 }
 // Edit button
-if($session->get_permissions('read') && ($paths->namespace != 'Special' && $paths->namespace != 'Admin' && $paths->namespace != 'Anonymous') && ( $session->get_permissions('edit_page') && ( ( $paths->page_protected && $session->get_permissions('even_when_protected') ) || !$paths->page_protected ) ) )
+if($perms->get_permissions('read') && ($local_namespace != 'Special' && $local_namespace != 'Admin' && $local_namespace != 'Anonymous') && ( $perms->get_permissions('edit_page') && ( ( $paths->page_protected && $perms->get_permissions('even_when_protected') ) || !$paths->page_protected ) ) )
 {
 $button->assign_vars(array(
 'FLAGS' => 'onclick="if ( !KILL_SWITCH ) { void(ajaxEditor()); return false; }" title="' . $lang->get('onpage_tip_edit') . '" accesskey="e"',
 'PARENTFLAGS' => 'id="mdgToolbar_edit"',
-'HREF' => makeUrl($paths->page, 'do=edit', true),
+'HREF' => makeUrl($local_page, 'do=edit', true),
 'TEXT' => $lang->get('onpage_btn_edit')
 ));
 $tb .= $button->run();
 // View source button
 }
-else if($session->get_permissions('view_source') && ( !$session->get_permissions('edit_page') || !$session->get_permissions('even_when_protected') && $paths->page_protected ) && $paths->namespace != 'Special' && $paths->namespace != 'Admin' && $paths->namespace != 'Anonymous')
+else if($perms->get_permissions('view_source') && ( !$perms->get_permissions('edit_page') || !$perms->get_permissions('even_when_protected') && $paths->page_protected ) && $local_namespace != 'Special' && $local_namespace != 'Admin' && $local_namespace != 'Anonymous')
 {
 $button->assign_vars(array(
 'FLAGS' => 'onclick="if ( !KILL_SWITCH ) { void(ajaxEditor()); return false; }" title="' . $lang->get('onpage_tip_viewsource') . '" accesskey="e"',
 'PARENTFLAGS' => 'id="mdgToolbar_edit"',
-'HREF' => makeUrl($paths->page, 'do=viewsource', true),
+'HREF' => makeUrl($local_page, 'do=viewsource', true),
 'TEXT' => $lang->get('onpage_btn_viewsource')
 ));
 $tb .= $button->run();
 }
 // History button
-if ( $session->get_permissions('read') /* && $paths->wiki_mode */ && $paths->page_exists && $paths->namespace != 'Special' && $paths->namespace != 'Admin' && $session->get_permissions('history_view') )
+if ( $perms->get_permissions('read') /* && $paths->wiki_mode */ && $paths->page_exists && $local_namespace != 'Special' && $local_namespace != 'Admin' && $perms->get_permissions('history_view') )
 {
 $button->assign_vars(array(
 'FLAGS'       => 'onclick="if ( !KILL_SWITCH ) { void(ajaxHistory()); return false; }" title="' . $lang->get('onpage_tip_history') . '" accesskey="h"',
 'PARENTFLAGS' => 'id="mdgToolbar_history"',
-'HREF'        => makeUrl($paths->page, 'do=history', true),
+'HREF'        => makeUrl($local_page, 'do=history', true),
 'TEXT'        => $lang->get('onpage_btn_history')
 ));
 $tb .= $button->run();
 }
 $menubtn = $this->makeParserText($tplvars['toolbar_menu_button']);
 // Additional actions menu
 // Rename button
-if ( $session->get_permissions('read') && $paths->page_exists && ( $session->get_permissions('rename') && ( $paths->page_protected && $session->get_permissions('even_when_protected') || !$paths->page_protected ) ) && $paths->namespace != 'Special' && $paths->namespace != 'Admin' )
+if ( $perms->get_permissions('read') && $paths->page_exists && ( $perms->get_permissions('rename') && ( $paths->page_protected && $perms->get_permissions('even_when_protected') || !$paths->page_protected ) ) && $local_namespace != 'Special' && $local_namespace != 'Admin' )
 {
 $menubtn->assign_vars(array(
 'FLAGS' => 'onclick="if ( !KILL_SWITCH ) { void(ajaxRename()); return false; }" title="' . $lang->get('onpage_tip_rename') . '" accesskey="r"',
-'HREF'  => makeUrl($paths->page, 'do=rename', true),
+'HREF'  => makeUrl($local_page, 'do=rename', true),
 'TEXT'  => $lang->get('onpage_btn_rename'),
 ));
 $this->toolbar_menu .= $menubtn->run();
 }
 // Vote-to-delete button
-if ( $paths->wiki_mode && $session->get_permissions('vote_delete') && $paths->page_exists && $paths->namespace != 'Special' && $paths->namespace != 'Admin')
+if ( $paths->wiki_mode && $perms->get_permissions('vote_delete') && $paths->page_exists && $local_namespace != 'Special' && $local_namespace != 'Admin')
 {
 $menubtn->assign_vars(array(
 'FLAGS' => 'onclick="if ( !KILL_SWITCH ) { void(ajaxDelVote()); return false; }" title="' . $lang->get('onpage_tip_delvote') . '" accesskey="d"',
-'HREF'  => makeUrl($paths->page, 'do=delvote', true),
+'HREF'  => makeUrl($local_page, 'do=delvote', true),
 'TEXT'  => $lang->get('onpage_btn_votedelete'),
 ));
 $this->toolbar_menu .= $menubtn->run();
 }
 // Clear-votes button
-if ( $session->get_permissions('read') && $paths->wiki_mode && $paths->page_exists && $paths->namespace != 'Special' && $paths->namespace != 'Admin' && $session->get_permissions('vote_reset') && $paths->cpage['delvotes'] > 0)
+if ( $perms->get_permissions('read') && $paths->wiki_mode && $paths->page_exists && $local_namespace != 'Special' && $local_namespace != 'Admin' && $perms->get_permissions('vote_reset') && $paths->cpage['delvotes'] > 0)
 {
 $menubtn->assign_vars(array(
 'FLAGS' => 'onclick="if ( !KILL_SWITCH ) { void(ajaxResetDelVotes()); return false; }" title="' . $lang->get('onpage_tip_resetvotes') . '" accesskey="y"',
-'HREF'  => makeUrl($paths->page, 'do=resetvotes', true),
+'HREF'  => makeUrl($local_page, 'do=resetvotes', true),
 'TEXT'  => $lang->get('onpage_btn_votedelete_reset'),
 ));
 $this->toolbar_menu .= $menubtn->run();
 }
 // Printable page button
-if ( $paths->page_exists && $paths->namespace != 'Special' && $paths->namespace != 'Admin' )
+if ( $paths->page_exists && $local_namespace != 'Special' && $local_namespace != 'Admin' )
 {
 $menubtn->assign_vars(array(
 'FLAGS' => 'title="' . $lang->get('onpage_tip_printable') . '"',
-'HREF'  => makeUrl($paths->page, 'printable=yes', true),
+'HREF'  => makeUrl($local_page, 'printable=yes', true),
 'TEXT'  => $lang->get('onpage_btn_printable'),
 ));
 $this->toolbar_menu .= $menubtn->run();
 }
 // Protect button
-if($session->get_permissions('read') && $paths->wiki_mode && $paths->page_exists && $paths->namespace != 'Special' && $paths->namespace != 'Admin' && $session->get_permissions('protect'))
+if($perms->get_permissions('read') && $paths->wiki_mode && $paths->page_exists && $local_namespace != 'Special' && $local_namespace != 'Admin' && $perms->get_permissions('protect'))
 {
 $label = $this->makeParserText($tplvars['toolbar_label']);
 $label->assign_vars(array('TEXT' => $lang->get('onpage_lbl_protect')));
 $t0 = $label->run();
 {
 $ctmp=' style="text-decoration: underline;"';
 }
 $menubtn->assign_vars(array(
 'FLAGS' => 'accesskey="i" onclick="if ( !KILL_SWITCH ) { ajaxProtect(1); return false; }" id="protbtn_1" title="' . $lang->get('onpage_tip_protect_on') . '"'.$ctmp,
-'HREF'  => makeUrl($paths->page, 'do=protect&level=1', true),
+'HREF'  => makeUrl($local_page, 'do=protect&level=1', true),
 'TEXT'  => $lang->get('onpage_btn_protect_on')
 ));
 $t1 = $menubtn->run();
 $ctmp = '';
 {
 $ctmp=' style="text-decoration: underline;"';
 }
 $menubtn->assign_vars(array(
 'FLAGS' => 'accesskey="o" onclick="if ( !KILL_SWITCH ) { ajaxProtect(0); return false; }" id="protbtn_0" title="' . $lang->get('onpage_tip_protect_off') . '"'.$ctmp,
-'HREF'  => makeUrl($paths->page, 'do=protect&level=0', true),
+'HREF'  => makeUrl($local_page, 'do=protect&level=0', true),
 'TEXT'  => $lang->get('onpage_btn_protect_off')
 ));
 $t2 = $menubtn->run();
 $ctmp = '';
 {
 $ctmp = ' style="text-decoration: underline;"';
 }
 $menubtn->assign_vars(array(
 'FLAGS' => 'accesskey="p" onclick="if ( !KILL_SWITCH ) { ajaxProtect(2); return false; }" id="protbtn_2" title="' . $lang->get('onpage_tip_protect_semi') . '"'.$ctmp,
-'HREF'  => makeUrl($paths->page, 'do=protect&level=2', true),
+'HREF'  => makeUrl($local_page, 'do=protect&level=2', true),
 'TEXT'  => $lang->get('onpage_btn_protect_semi')
 ));
 $t3 = $menubtn->run();
 $this->toolbar_menu .= '        <table border="0" cellspacing="0" cellpadding="0">
 </tr>
 </table>';
 }
 // Wiki mode button
-if($session->get_permissions('read') && $paths->page_exists && $session->get_permissions('set_wiki_mode') && $paths->namespace != 'Special' && $paths->namespace != 'Admin')
+if($perms->get_permissions('read') && $paths->page_exists && $perms->get_permissions('set_wiki_mode') && $local_namespace != 'Special' && $local_namespace != 'Admin')
 {
 // label at start
 $label = $this->makeParserText($tplvars['toolbar_label']);
 $label->assign_vars(array('TEXT' => $lang->get('onpage_lbl_wikimode')));
 $t0 = $label->run();
 {
 $ctmp = ' style="text-decoration: underline;"';
 }
 $menubtn->assign_vars(array(
 'FLAGS' => /* 'onclick="if ( !KILL_SWITCH ) { ajaxSetWikiMode(1); return false; }" id="wikibtn_1" title="Forces wiki functions to be allowed on this page."'. */ $ctmp,
-'HREF' => makeUrl($paths->page, 'do=setwikimode&level=1', true),
+'HREF' => makeUrl($local_page, 'do=setwikimode&level=1', true),
 'TEXT' => $lang->get('onpage_btn_wikimode_on')
 ));
 $t1 = $menubtn->run();
 // off button
 {
 $ctmp=' style="text-decoration: underline;"';
 }
 $menubtn->assign_vars(array(
 'FLAGS' => /* 'onclick="if ( !KILL_SWITCH ) { ajaxSetWikiMode(0); return false; }" id="wikibtn_0" title="Forces wiki functions to be disabled on this page."'. */ $ctmp,
-'HREF' => makeUrl($paths->page, 'do=setwikimode&level=0', true),
+'HREF' => makeUrl($local_page, 'do=setwikimode&level=0', true),
 'TEXT' => $lang->get('onpage_btn_wikimode_off')
 ));
 $t2 = $menubtn->run();
 // global button
 {
 $ctmp=' style="text-decoration: underline;"';
 }
 $menubtn->assign_vars(array(
 'FLAGS' => /* 'onclick="if ( !KILL_SWITCH ) { ajaxSetWikiMode(2); return false; }" id="wikibtn_2" title="Causes this page to use the global wiki mode setting (default)"'. */ $ctmp,
-'HREF' => makeUrl($paths->page, 'do=setwikimode&level=2', true),
+'HREF' => makeUrl($local_page, 'do=setwikimode&level=2', true),
 'TEXT' => $lang->get('onpage_btn_wikimode_global')
 ));
 $t3 = $menubtn->run();
 // Tack it onto the list of buttons that are already there...
 </tr>
 </table>';
 }
 // Clear logs button
-if ( $session->get_permissions('read') && $session->get_permissions('clear_logs') && $paths->namespace != 'Special' && $paths->namespace != 'Admin' )
+if ( $perms->get_permissions('read') && $perms->get_permissions('clear_logs') && $local_namespace != 'Special' && $local_namespace != 'Admin' )
 {
 $menubtn->assign_vars(array(
 'FLAGS' => 'onclick="if ( !KILL_SWITCH ) { void(ajaxClearLogs()); return false; }" title="' . $lang->get('onpage_tip_flushlogs') . '" accesskey="l"',
-'HREF'  => makeUrl($paths->page, 'do=flushlogs', true),
+'HREF'  => makeUrl($local_page, 'do=flushlogs', true),
 'TEXT'  => $lang->get('onpage_btn_clearlogs'),
 ));
 $this->toolbar_menu .= $menubtn->run();
 }
 // Delete page button
-if ( $session->get_permissions('read') && $session->get_permissions('delete_page') && $paths->page_exists && $paths->namespace != 'Special' && $paths->namespace != 'Admin' )
+if ( $perms->get_permissions('read') && $perms->get_permissions('delete_page') && $paths->page_exists && $local_namespace != 'Special' && $local_namespace != 'Admin' )
 {
 $s = $lang->get('onpage_btn_deletepage');
 if ( $paths->cpage['delvotes'] == 1 )
 {
 $subst = array(
 $s .= $lang->get('onpage_btn_deletepage_votes', $subst);
 }
 $menubtn->assign_vars(array(
 'FLAGS' => 'onclick="if ( !KILL_SWITCH ) { void(ajaxDeletePage()); return false; }" title="' . $lang->get('onpage_tip_deletepage') . '" accesskey="k"',
-'HREF'  => makeUrl($paths->page, 'do=deletepage', true),
+'HREF'  => makeUrl($local_page, 'do=deletepage', true),
 'TEXT'  => $s,
 ));
 $this->toolbar_menu .= $menubtn->run();
 }
 // Password-protect button
 if(isset($paths->cpage['password']))
 {
 if ( $paths->cpage['password'] == '' )
 {
-$a = $session->get_permissions('password_set');
+$a = $perms->get_permissions('password_set');
 }
 else
 {
-$a = $session->get_permissions('password_reset');
+$a = $perms->get_permissions('password_reset');
 }
 }
 else
 {
-$a = $session->get_permissions('password_set');
+$a = $perms->get_permissions('password_set');
 }
-if ( $a && $session->get_permissions('read') && $paths->page_exists && $paths->namespace != 'Special' && $paths->namespace != 'Admin' )
+if ( $a && $perms->get_permissions('read') && $paths->page_exists && $local_namespace != 'Special' && $local_namespace != 'Admin' )
 {
 // label at start
 $label = $this->makeParserText($tplvars['toolbar_label']);
 $label->assign_vars(array('TEXT' => $lang->get('onpage_lbl_password')));
 $t0 = $label->run();
 $this->toolbar_menu .= '<table border="0" cellspacing="0" cellpadding="0"><tr><td>'.$t0.'</td><td><input type="password" id="mdgPassSetField" size="10" /></td><td>'.$t.'</td></tr></table>';
 }
 // Manage ACLs button
-if ( !$paths->anonymous_page && ( $session->get_permissions('edit_acl') || ( defined('ACL_ALWAYS_ALLOW_ADMIN_EDIT_ACL') &&  $session->user_level >= USER_LEVEL_ADMIN ) ) )
+if ( !$paths->anonymous_page && ( $perms->get_permissions('edit_acl') || ( defined('ACL_ALWAYS_ALLOW_ADMIN_EDIT_ACL') &&  $session->user_level >= USER_LEVEL_ADMIN ) ) )
 {
 $menubtn->assign_vars(array(
 'FLAGS' => 'onclick="if ( !KILL_SWITCH ) { return ajaxOpenACLManager(); }" title="' . $lang->get('onpage_tip_aclmanager') . '" accesskey="m"',
-'HREF'  => makeUrl($paths->page, 'do=aclmanager', true),
+'HREF'  => makeUrl($local_page, 'do=aclmanager', true),
 'TEXT'  => $lang->get('onpage_btn_acl'),
 ));
 $this->toolbar_menu .= $menubtn->run();
 }
 // Administer page button
-if ( $session->user_level >= USER_LEVEL_ADMIN && $paths->page_exists && $paths->namespace != 'Special' && $paths->namespace != 'Admin' )
+if ( $session->user_level >= USER_LEVEL_ADMIN && $paths->page_exists && $local_namespace != 'Special' && $local_namespace != 'Admin' )
 {
 $menubtn->assign_vars(array(
 'FLAGS' => 'onclick="if ( !KILL_SWITCH ) { void(ajaxAdminPage()); return false; }" title="' . $lang->get('onpage_tip_adminoptions') . '" accesskey="g"',
 'HREF'  => makeUrlNS('Special', 'Administration', 'module='.$paths->nslist['Admin'].'PageManager', true),
 'TEXT'  => $lang->get('onpage_btn_admin'),
 if ( strlen($this->toolbar_menu) > 0 )
 {
 $button->assign_vars(array(
 'FLAGS'       => 'id="mdgToolbar_moreoptions" onclick="if ( !KILL_SWITCH ) { return false; }" title="' . $lang->get('onpage_tip_moreoptions') . '"',
 'PARENTFLAGS' => '',
-'HREF'        => makeUrl($paths->page, 'do=moreoptions', true),
+'HREF'        => makeUrl($local_page, 'do=moreoptions', true),
 'TEXT'        => $lang->get('onpage_btn_moreoptions')
 ));
 $tb .= $button->run();
 }
 $this->tpl_bool['fixed_menus'] = false;
 /* if($this->sidebar_extra == '') $this->tpl_bool['right_sidebar'] = false;
 else */ $this->tpl_bool['right_sidebar'] = true;
-$this->tpl_bool['auth_rename'] = ( $paths->page_exists && ( $session->get_permissions('rename') && ( $paths->page_protected && $session->get_permissions('even_when_protected') || !$paths->page_protected ) ) && $paths->namespace != 'Special' && $paths->namespace != 'Admin');
+$this->tpl_bool['auth_rename'] = ( $paths->page_exists && ( $perms->get_permissions('rename') && ( $paths->page_protected && $perms->get_permissions('even_when_protected') || !$paths->page_protected ) ) && $local_namespace != 'Special' && $local_namespace != 'Admin');
-$this->tpl_bool['enable_uploads'] = ( getConfig('enable_uploads') == '1' && $session->get_permissions('upload_files') ) ? true : false;
+$this->tpl_bool['enable_uploads'] = ( getConfig('enable_uploads') == '1' && $perms->get_permissions('upload_files') ) ? true : false;
 $this->tpl_bool['stupid_mode'] = false;
-$this->tpl_bool['in_admin'] = ( ( $paths->page_id == 'Administration' && $paths->namespace == 'Special' ) || $paths->namespace == 'Admin' );
+$this->tpl_bool['in_admin'] = ( ( $local_page_id == 'Administration' && $local_namespace == 'Special' ) || $local_namespace == 'Admin' );
 $p = ( isset($_GET['printable']) ) ? '/printable' : '';
 // Add the e-mail address client code to the header
 $this->add_header($email->jscode());
 // Once again, the new template parsing system can be used here
 $parser = $this->makeParserText($tplvars['sidebar_button']);
 $parser->assign_vars(Array(
-'HREF'=>makeUrlNS('Special', 'Logout'),
+'HREF'=>makeUrlNS('Special', "Logout/{$session->csrf_token}/{$local_page}"),
 'FLAGS'=>'onclick="if ( !KILL_SWITCH ) { mb_logout(); return false; }"',
 'TEXT'=>$lang->get('sidebar_btn_logout'),
 ));
 $logout_link = $parser->run();
 $parser->assign_vars(Array(
-'HREF'=>makeUrlNS('Special', 'Login/' . $paths->page),
+'HREF'=>makeUrlNS('Special', 'Login/' . $local_page),
 'FLAGS'=>'onclick="if ( !KILL_SWITCH ) { ajaxStartLogin(); return false; }"',
 'TEXT'=>$lang->get('sidebar_btn_login'),
 ));
 $login_link = $parser->run();
 $parser->assign_vars(Array(
-'HREF'=>makeUrlNS('Special', 'ChangeStyle/'.$paths->page),
+'HREF'=>makeUrlNS('Special', 'ChangeStyle/'.$local_page),
 'FLAGS'=>'onclick="if ( !KILL_SWITCH ) { ajaxChangeStyle(); return false; }"',
 'TEXT'=>$lang->get('sidebar_btn_changestyle'),
 ));
 $theme_link = $parser->run();
 $admin_link = $parser->run();
 $SID = ($session->sid_super) ? $session->sid_super : '';
-$urlname_clean = str_replace('\'', '\\\'', str_replace('\\', '\\\\', dirtify_page_id($paths->fullpage)));
+$urlname_clean = str_replace('\'', '\\\'', str_replace('\\', '\\\\', dirtify_page_id($local_fullpage)));
 $urlname_clean = strtr( $urlname_clean, array( '<' => '&lt;', '>' => '&gt;' ) );
-$urlname_jssafe = sanitize_page_id($paths->fullpage);
+$urlname_jssafe = sanitize_page_id($local_fullpage);
 // Generate the dynamic javascript vars
 $js_dynamic = '    <script type="text/javascript">// <![CDATA[
 // This section defines some basic and very important variables that are used later in the static Javascript library.
 // SKIN DEVELOPERS: The template variable for this code block is {JS_DYNAMIC_VARS}. This MUST be inserted BEFORE the tag that links to the main Javascript lib.
 var USER_LEVEL_MEMBER = ' . USER_LEVEL_MEMBER . ';
 var USER_LEVEL_CHPREF = ' . USER_LEVEL_CHPREF . ';
 var USER_LEVEL_MOD = ' . USER_LEVEL_MOD . ';
 var USER_LEVEL_ADMIN = ' . USER_LEVEL_ADMIN . ';
 var pref_disable_js_fx = ' . ( @$session->user_extra['disable_js_fx'] == 1 ? '1' : '0' ) . ';
+var csrf_token = "' . $session->csrf_token . '";
 var editNotice = \'' . ( (getConfig('wiki_edit_notice')=='1') ? str_replace("\n", "\\\n", RenderMan::render(getConfig('wiki_edit_notice_text'))) : '' ) . '\';
-var prot = ' . ( ($paths->page_protected && !$session->get_permissions('even_when_protected')) ? 'true' : 'false' ) .'; // No, hacking this var won\'t work, it\'s re-checked on the server
+var prot = ' . ( ($paths->page_protected && !$perms->get_permissions('even_when_protected')) ? 'true' : 'false' ) .'; // No, hacking this var won\'t work, it\'s re-checked on the server
 var ENANO_SPECIAL_CREATEPAGE = \''. makeUrl($paths->nslist['Special'].'CreatePage') .'\';
-var ENANO_CREATEPAGE_PARAMS = \'_do=&pagename='. $urlname_clean .'&namespace=' . $paths->namespace . '\';
+var ENANO_CREATEPAGE_PARAMS = \'_do=&pagename='. $urlname_clean .'&namespace=' . $local_namespace . '\';
 var ENANO_SPECIAL_CHANGESTYLE = \''. makeUrlNS('Special', 'ChangeStyle') .'\';
 var namespace_list = new Array();
 var AES_BITS = '.AES_BITS.';
 var AES_BLOCKSIZE = '.AES_BLOCKSIZE.';
 var pagepass = \''. ( ( isset($_REQUEST['pagepass']) ) ? sha1($_REQUEST['pagepass']) : '' ) .'\';
 foreach($paths->nslist as $k => $c)
 {
 $js_dynamic .= "namespace_list['{$k}'] = '$c';";
 }
 $js_dynamic .= "\n    //]]>\n    </script>";
 $tpl_strings = Array(
 'PAGE_NAME'=>htmlspecialchars($paths->cpage['name']),
 'PAGE_URLNAME'=> $urlname_clean,
 'SITE_NAME'=>htmlspecialchars(getConfig('site_name')),
 'USERNAME'=>$session->username,
 'LOGIN_LINK'=>$login_link,
 'LOGOUT_LINK'=>$logout_link,
 'ADMIN_LINK'=>$admin_link,
 'THEME_LINK'=>$theme_link,
 'SEARCH_ACTION'=>makeUrlNS('Special', 'Search'),
-'INPUT_TITLE'=>( urlSeparator == '&' ? '<input type="hidden" name="title" value="' . htmlspecialchars( $paths->nslist[$paths->namespace] . $paths->page_id ) . '" />' : ''),
+'INPUT_TITLE'=>( urlSeparator == '&' ? '<input type="hidden" name="title" value="' . htmlspecialchars( $paths->nslist[$local_namespace] . $local_page_id ) . '" />' : ''),
 'INPUT_AUTH'=>( $session->sid_super ? '<input type="hidden" name="auth"  value="' . $session->sid_super . '" />' : ''),
 'TEMPLATE_DIR'=>scriptPath.'/themes/'.$this->theme,
 'THEME_ID'=>$this->theme,
 'STYLE_ID'=>$this->style,
 'JS_DYNAMIC_VARS'=>$js_dynamic,
 'UNREAD_PMS'=>$session->unread_pms,
 'URL_ABOUT_ENANO' => makeUrlNS('Special', 'About_Enano', '', true),
-'REPORT_URI' => makeUrl($paths->fullpage, 'do=sql_report', true)
+'REPORT_URI' => makeUrl($local_fullpage, 'do=sql_report', true)
 );
 foreach ( $paths->nslist as $ns_id => $ns_prefix )
 {
 $tpl_strings[ 'NS_' . strtoupper($ns_id) ] = $ns_prefix;
 }
-$this->tpl_strings = array_merge($tpl_strings, $this->tpl_strings);
+$this->assign_vars($tpl_strings, true);
 list($this->tpl_strings['SIDEBAR_LEFT'], $this->tpl_strings['SIDEBAR_RIGHT'], $min) = $this->fetch_sidebar();
 $this->tpl_bool['sidebar_left']  = ( $this->tpl_strings['SIDEBAR_LEFT']  != $min) ? true : false;
 $this->tpl_bool['sidebar_right'] = ( $this->tpl_strings['SIDEBAR_RIGHT'] != $min) ? true : false;
 $this->tpl_bool['right_sidebar'] = $this->tpl_bool['sidebar_right']; // backward compatibility
 {
 eval($cmd);
 }
 profiler_log("template: finished var init");
+}
+/**
+* Performs var init that is common to all pages (IOW, called only once)
+* @access private
+*/
+function init_vars_global()
+{
 }
 function header($simple = false)
 {
 global $db, $session, $paths, $template, $plugins; // Common objects
 else
 {
 return '';
 }
 }
+/**
+* Assigns an array of string values to the template. Strings can be accessed from the template by inserting {KEY_NAME} in the template file.
+* @param $vars array
+* @param $from_internal bool Internal switch, just omit (@todo document)
+*/
+function assign_vars($vars, $from_internal = false)
+{
+foreach ( $vars as $key => $value )
+{
+$replace = true;
+if ( isset($this->vars_assign_history['strings'][$key]) )
+{
+if ( $this->vars_assign_history['strings'][$key] == 'api' )
+{
+$replace = false;
+}
+}
+if ( $replace )
+{
+$this->tpl_strings[$key] = $value;
+$this->vars_assign_history['strings'][$key] = ( $from_internal ) ? 'internal' : 'api';
+}
+}
+}
+/**
+* Assigns an array of boolean values to the template. These can be used for <!-- IF ... --> statements.
+* @param $vars array
+* @param $from_internal bool Internal switch, just omit (@todo document)
+*/
+function assign_bool($vars)
+{
+foreach ( $vars as $key => $value )
+{
+$replace = true;
+if ( isset($this->vars_assign_history['bool'][$key]) )
+{
+if ( $this->vars_assign_history['bool'][$key] == 'api' )
+{
+$replace = false;
+}
+}
+if ( $replace )
+{
+$this->tpl_bool[$key] = $value;
+$this->vars_assign_history['bool'][$key] = ( $from_internal ) ? 'internal' : 'api';
+}
+}
+}
+#
+# COMPILER
+#
 /**
 * Compiles and executes a template based on the current variables and booleans. Loads
 * the theme and initializes variables if needed. This mostly just calls child functions.
 * @param string File to process
 function templateIndividual($text)
 {
 $this->__construct($text);
 }
 */
 /**
 * Assigns an array of string values to the template. Strings can be accessed from the template by inserting {KEY_NAME} in the template file.
 * @param $vars array
 */
 function assign_vars($vars)
 {
 $this->tpl_strings = array_merge($this->tpl_strings, $vars);
 }
 /**
 * Assigns an array of boolean values to the template. These can be used for <!-- IF ... --> statements.
 * @param $vars array
 */
 function assign_bool($vars)
 {
 $this->tpl_bool = array_merge($this->tpl_bool, $vars);
 }
 /**
 * Compiles and executes the template code.
 * @return string
 */
 function run()

changeset 557	26479224936a
parent 555	ac4c6a7f01d8
child 566	06d241de3151