From 293f9e94f0c6dbca655cfd360dfa1f28a8ae2857 Mon Sep 17 00:00:00 2001 From: Starbeamrainbowlabs Date: Sat, 10 Oct 2015 13:00:46 +0100 Subject: [PATCH] Add use_sha3 option to settings in light of recent developments with sha256 --- build/index.php | 3474 ++++++++++++++++++++------------------- module_index.json | 6 +- modules/action-hash.php | 4 +- modules/page-login.php | 29 +- settings.fragment.php | 5 + start-server.sh | 2 +- 6 files changed, 1790 insertions(+), 1730 deletions(-) diff --git a/build/index.php b/build/index.php index 6413b2a..847b069 100644 --- a/build/index.php +++ b/build/index.php @@ -1,6 +1,6 @@ -subpages_display_depth = 3; // sha256. Put one user / password on each line, remembering the comma at the // end. The last user in the list doesn't need a comma after their details though. $settings->users = [ - "admin" => "5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8", //password - "user" => "873ac9ffea4dd04fa719e8920cd6938f0c23cd678af330939cff53c3d2855f34" //cheese + "admin" => "c0067d4af4e87f00dbac63b6156828237059172d1bbeac67427345d6a9fda484", //password + "user" => "dc0d2411a751cb3c5d80a1abc51b2f44b6f10e7c4742296998444a19a2b43197" //cheese ]; +// Whether to use the new sha3 hashing algorithm that was standardised on the +// 8th August 2015. Only works if you have strawbrary's sha3 extension +// installed. Get it here: https://github.com/strawbrary/php-sha3 +$settings->use_sha3 = true; + // An array of usernames that are administrators. Administrators can delete and // move pages. $settings->admins = [ "admin" ]; @@ -258,674 +263,676 @@ Actions: delete=yes - actually do the deletion (otherwise we display a prompt) */ - - -/////////////////////////////////////////////////////////////////////////////////////////////// -/////////////// Do not edit below this line unless you know what you are doing! /////////////// -/////////////////////////////////////////////////////////////////////////////////////////////// -$version = "v0.9-dev"; -$env = new stdClass(); -$env->action = $settings->defaultaction; -$env->page = ""; -$env->user = "Anonymous"; -$env->is_logged_in = false; -$env->is_admin = false; - -session_start(); -///////// Login System ///////// -// Clear expired sessions -if(isset($_SESSION["$settings->sessionprefix-expiretime"]) and - $_SESSION["$settings->sessionprefix-expiretime"] < time()) -{ - // Clear the session variables - $_SESSION = []; - session_destroy(); - $env->is_logged_in = false; - $env->user = "Anonymous"; -} - -if(!isset($_SESSION[$settings->sessionprefix . "-user"]) and - !isset($_SESSION[$settings->sessionprefix . "-pass"])) -{ - // The user is not logged in - $env->is_logged_in = false; -} -else -{ - $env->user = $_SESSION[$settings->sessionprefix . "-user"]; - $env->pass = $_SESSION[$settings->sessionprefix . "-pass"]; - if($settings->users[$env->user] == $env->pass) - { - // The user is logged in - $env->is_logged_in = true; - } - else - { - // The user's login details are invalid (what is going on here?) - // Unset the session variables, treat them as an anonymous user, - // and get out of here - $env->is_logged_in = false; - $env->user = "Anonymous"; - $env->pass = ""; - // Clear the session data - $_SESSION = []; //delete all the variables - session_destroy(); //destroy the session - } -} -//check to see if the currently logged in user is an admin -$env->is_admin = false; -if($env->is_logged_in) -{ - foreach($settings->admins as $admin_username) - { - if($admin_username == $env->user) - { - $env->is_admin = true; - break; - } - } -} -/////// Login System End /////// - -/////////////////////////////////////////////////////////////////////////////////////////// -//////////////////////////////////////// Functions //////////////////////////////////////// -/////////////////////////////////////////////////////////////////////////////////////////// - -/* - * @summary Converts a filesize into a human-readable string. - * @source http://php.net/manual/en/function.filesize.php#106569 - * @editor Starbeamrainbowlabs - * - * @param $bytes - The number of bytes to convert. - * @param $decimals - The number of decimal places to preserve. - */ -function human_filesize($bytes, $decimals = 2) -{ - $sz = ["B", "KB", "MB", "GB", "TB", "PB", "EB", "YB", "ZB"]; - $factor = floor((strlen($bytes) - 1) / 3); - return sprintf("%.{$decimals}f", $bytes / pow(1024, $factor)) . @$sz[$factor]; -} -/* - * @summary Calculates the time sincce a particular timestamp and returns a - * human-readable result. - * @source http://snippets.pro/snippet/137-php-convert-the-timestamp-to-human-readable-format/ - * - * @param $time - The timestamp to convert. - * - * @returns {string} - The time since the given timestamp pas a human-readable string. - */ -function human_time_since($time) -{ - $timediff = time() - $time; - $tokens = array ( - 31536000 => 'year', - 2592000 => 'month', - 604800 => 'week', - 86400 => 'day', - 3600 => 'hour', - 60 => 'minute', - 1 => 'second' - ); - foreach ($tokens as $unit => $text) { - if ($timediff < $unit) continue; - $numberOfUnits = floor($timediff / $unit); - return $numberOfUnits.' '.$text.(($numberOfUnits>1)?'s':'').' ago'; - } -} - -/* - * @summary A recursive glob() function. - * - * @param $pattern - The glob pattern to use to find filenames. - * @param $flags - The glob flags to use when finding filenames. - * - * @returns {array} - An array of the filepaths that match the given glob. - */ -// From http://in.php.net/manual/en/function.glob.php#106595 -function glob_recursive($pattern, $flags = 0) -{ - $files = glob($pattern, $flags); - foreach (glob(dirname($pattern).'/*', GLOB_ONLYDIR|GLOB_NOSORT) as $dir) - { - $prefix = "$dir/"; - // Remove the "./" from the beginning if it exists - if(substr($prefix, 0, 2) == "./") $prefix = substr($prefix, 2); - $files = array_merge($files, glob_recursive($prefix . basename($pattern), $flags)); - } - return $files; -} - -/* - * @summary Gets a list of all the sub pagess of the current page. - * - * @param $pageindex - The pageindex to use to search. - * @param $pagename - The name of the page to list the sub pages of. - * - * @returns An objectt containing all the subpages, and their respective distances from the given page name in the pageindex tree. - */ -function get_subpages($pageindex, $pagename) -{ - $pagenames = get_object_vars($pageindex); - $result = new stdClass(); - - $stem = "$pagename/"; - $stem_length = strlen($stem); - foreach($pagenames as $entry => $value) - { - if(substr($entry, 0, $stem_length) == $stem) - { - // We found a subpage - - // Extract the subpage's key relative to the page that we are searching for - $subpage_relative_key = substr($entry, $stem_length, -3); - // Calculate how many times removed the current subpage is from the current page. 0 = direct descendant. - $times_removed = substr_count($subpage_relative_key, "/"); - // Store the name of the subpage we found - $result->$entry = $times_removed; - } - } - - unset($pagenames); - return $result; -} - -/* - * @summary Makes sure that a subpage's parents exist. Note this doesn't check the pagename itself. - * - * @param The pagename to check. - * - */ -function check_subpage_parents($pagename) -{ - global $pageindex; - // Save the new pageindex and return if there aren't any more parent pages to check - if(strpos($pagename, "/") === false) - { - file_put_contents("./pageindex.json", json_encode($pageindex, JSON_PRETTY_PRINT)); - return; - } - - $parent_pagename = substr($pagename, 0, strrpos($pagename, "/")); - $parent_page_filename = "$parent_pagename.md"; - if(!file_exists($parent_page_filename)) - { - // This parent page doesn't exist! Create it and add it to the page index. - touch($parent_page_filename, 0); - - $newentry = new stdClass(); - $newentry->filename = $parent_page_filename; - $newentry->size = 0; - $newentry->lastmodified = 0; - $newentry->lasteditor = "none"; - $pageindex->$parent_pagename = $newentry; - } - - check_subpage_parents($parent_pagename); -} - -/* - * @summary makes a path safe - * - * @details paths may only contain alphanumeric characters, spaces, underscores, and dashes - */ -function makepathsafe($string) -{ - return preg_replace("/[^0-9a-zA-Z\_\-\ \/]/i", "", $string); -} - -/* - * @summary Hides an email address from bots by adding random html entities. - * - * @returns The mangled email address. - */ -function hide_email($str) -{ - $hidden_email = ""; - for($i = 0; $i < strlen($str); $i++) - { - if($str[$i] == "@") - { - $hidden_email .= "&#" . ord("@") . ";"; - continue; - } - if(rand(0, 1) == 0) - $hidden_email .= $str[$i]; - else - $hidden_email .= "&#" . ord($str[$i]) . ";"; - } - - return $hidden_email; -} - -/////////////////////////////////////////////////////////////////////////////////////////// - -/////////////////////////////////////////////////////////////////////////////////////////// -//////////////////////////// Security and Consistency Measures //////////////////////////// -/////////////////////////////////////////////////////////////////////////////////////////// - -/* - * Sort out the pageindex. We create it if it doesn't exist, and load and parse - * it if it does. - */ -if(!file_exists("./pageindex.json")) -{ - $existingpages = glob_recursive("*.md"); - $pageindex = new stdClass(); - // We use a for loop here because foreach doesn't loop over new values inserted - // while we were looping - for($i = 0; $i < count($existingpages); $i++) - { - $pagefilename = $existingpages[$i]; - - // Create a new entry - $newentry = new stdClass(); - $newentry->filename = utf8_encode($pagefilename); // Store the filename - $newentry->size = filesize($pagefilename); // Store the page size - $newentry->lastmodified = filemtime($pagefilename); // Store the date last modified - // Todo find a way to keep the last editor independent of the page index - $newentry->lasteditor = utf8_encode("unknown"); // Set the editor to "unknown" - // Extract the name of the (sub)page without the ".md" - $pagekey = utf8_encode(substr($pagefilename, 0, -3)); - - // Subpage parent checker - if(strpos($pagekey, "/") !== false) - { - // We have a sub page people - // Work out what our direct parent's key must be in order to check to - // make sure that it actually exists. If it doesn't, then we need to - // create it. - $subpage_parent_key = substr($pagekey, 0, strrpos($pagekey, "/")); - $subpage_parent_filename = "$subpage_parent_key.md"; - if(array_search($subpage_parent_filename, $existingpages) === false) - { - // Our parent page doesn't acutally exist - create it - touch($subpage_parent_filename, 0); - // Furthermore, we should add this page to the list of existing pages - // in order for it to be indexed - $existingpages[] = $subpage_parent_filename; - } - } - - // Store the new entry in the new page index - $pageindex->$pagekey = $newentry; - } - file_put_contents("./pageindex.json", json_encode($pageindex, JSON_PRETTY_PRINT)); - unset($existingpages); -} -else -{ - $pageindex = json_decode(file_get_contents("./pageindex.json")); -} - -// Work around an Opera + Syntaxtic bug where there is no margin at the left hand side if there isn't a query string when accessing a .php file -if(!isset($_GET["action"]) and !isset($_GET["page"])) -{ - http_response_code(302); - header("location: index.php?action=$settings->defaultaction&page=$settings->defaultpage"); - exit(); -} - -// Make sure that the action is set -if(!isset($_GET["action"])) - $_GET["action"] = $settings->defaultaction; -// Make sure that the page is set -if(!isset($_GET["page"]) or strlen($_GET["page"]) === 0) - $_GET["page"] = $settings->defaultpage; - -// Redirect the user to the safe version of the path if they entered an unsafe character -if(makepathsafe($_GET["page"]) !== $_GET["page"]) -{ - http_response_code(301); - header("location: index.php?action=" . rawurlencode($_GET["action"]) . "&page=" . makepathsafe($_GET["page"])); - header("x-requested-page: " . $_GET["page"]); - header("x-actual-page: " . makepathsafe($_GET["page"])); - exit(); -} - -$env->page = $_GET["page"]; -$env->action = strtolower($_GET["action"]); - -/////////////////////////////////////////////////////////////////////////////////////////// -/////////////////////////////////////////////////////////////////////////////////////////// - -//////////////////////////////////////////////////////////////////////////////////////////// -////////////////////////////////////// HTML fragments ////////////////////////////////////// -//////////////////////////////////////////////////////////////////////////////////////////// -class page_renderer -{ - public static $html_template = " - - - - {title} - - - - {header-html} - - - {body} - - - -"; - - public static $main_content_template = "{navigation-bar} -

{sitename}

-
- {content} -
- - - {navigation-bar-bottom} - {all-pages-datalist}"; - public static $minimal_content_template = "
{content}
- "; - - // An array of functions that have been registered to process the - // find / replace array before the page is rendered. Note that the function - // should take a *reference* to an array as its only argument. - protected static $part_processors = []; - - // Registers a function as a part post processor. - public static function register_part_preprocessor($function) - { - global $settings; - - // Make sure that the function we are about to register is valid - if(!is_callable($function)) - { - http_response_code(500); - $admin_name = $settings->admindetails["name"]; - $admin_email = hide_email($settings->admindetails["email"]); - exit(page_renderer::render("$settings->sitename - Module Error", "

$settings->sitename has got a misbehaving module installed that tried to register an invalid HTML handler with the page renderer. Please contact $settings->sitename's administrator $admin_name at $admin_email.")); - } - - self::$part_processors[] = $function; - - return true; - } - - public static function render($title, $content, $body_template = false) - { - global $settings, $start_time, $version; - - if($body_template === false) - $body_template = self::$main_content_template; - - if(strlen($settings->logo_url) > 0) - { - // A logo url has been specified - $logo_html = ""; - switch($settings->logo_position) - { - case "left": - $logo_html = "$logo_html $settings->sitename"; - break; - case "right": - $logo_html .= " $settings->sitename"; - break; - default: - throw new Exception("Invalid logo_position '$settings->logo_position'. Valid values are either \"left\" or \"right\" and are case sensitive."); - } - } - - $parts = [ - "{body}" => $body_template, - - "{sitename}" => $logo_html, - "v0.9-dev" => $version, - "{favicon-url}" => $settings->favicon, - "{header-html}" => self::get_css_as_html(), - - "{navigation-bar}" => self::render_navigation_bar($settings->nav_links, $settings->nav_links_extra, "top"), - "{navigation-bar-bottom}" => self::render_navigation_bar($settings->nav_links_bottom, [], "bottom"), - - "{admin-details-name}" => $settings->admindetails["name"], - "{admin-details-email}" => $settings->admindetails["email"], - - "{admins-name-list}" => implode(", ", $settings->admins), - - "{generation-date}" => date("l jS \of F Y \a\\t h:ia T"), - - "{all-pages-datalist}" => self::generate_all_pages_datalist(), - - "{footer-message}" => $settings->footer_message - ]; - - // Pass the parts through the part processors - foreach(self::$part_processors as $function) - { - $function($parts); - } - - $result = self::$html_template; - - $result = str_replace(array_keys($parts), array_values($parts), $result); - - $result = str_replace([ - "{title}", - "{content}" - ], [ - $title, - $content - ], $result); - - $result = str_replace("{generation-time-taken}", microtime(true) - $start_time, $result); - return $result; - } - public static function render_main($title, $content) - { - return self::render($title, $content, self::$main_content_template); - } - public static function render_minimal($title, $content) - { - return self::render($title, $content, self::$minimal_content_template); - } - - - public static function get_css_as_html() - { - global $settings; - - if(preg_match("/^[^\/]*\/\/|^\//", $settings->css)) - return ""; - else - return ""; - } - - public static $nav_divider = " | "; - - /* - * @summary Function to render a navigation bar from an array of links. See - * $settings->nav_links for format information. - * - * @param $nav_links - The links to add to the navigation bar. - * @param $nav_links_extra - The extra nav links to add to the "More..." - * menu. - */ - public static function render_navigation_bar($nav_links, $nav_links_extra, $class = "") - { - global $settings, $env; - $result = "

"; - return $result; - } - public static function render_username($name) - { - global $settings; - $result = ""; - if(in_array($name, $settings->admins)) - $result .= $settings->admindisplaychar; - $result .= $name; - - return $result; - } - - public static function generate_all_pages_datalist() - { - global $pageindex; - - $result = "\n"; - foreach($pageindex as $pagename => $pagedetails) - { - $result .= "\t\t\t"; - - return $result; - } -} - -////////////////////////// -/// Module functions /// -////////////////////////// -// These functions are // -// used by modules to // -// register themselves // -// or new pages. // -////////////////////////// -$modules = []; // List that contains all the loaded modules -// Function to register a module -function register_module($moduledata) -{ - global $modules; - //echo("registering module\n"); - //var_dump($moduledata); - $modules[] = $moduledata; -} - -// Function to register an action handler -$actions = new stdClass(); -function add_action($action_name, $func) -{ - global $actions; - //echo("adding $action_name\n"); - $actions->$action_name = $func; -} - -// Function to register a new parser. -$parsers = [ - "none" => function() { - throw new Exception("No parser registered!"); - } -]; -function add_parser($name, $parser_code) -{ - global $parsers; - if(isset($parsers[$name])) - throw new Exception("Can't register parser with name '$name' because a parser with that name already exists."); - - $parsers[$name] = $parser_code; -} -function parse_page_source($source) -{ - global $settings, $parsers; - if(!isset($parsers[$settings->parser])) - exit(page_renderer::render_main("Parsing error - $settings->sitename", "

Parsing some page source data failed. This is most likely because $settings->sitename has the parser setting set incorrectly. Please contact " . $settings->admindetails["name"] . ", your $settings->sitename Administrator.")); - -/* Not needed atm because escaping happens when saving, not when rendering * - if($settings->clean_raw_html) - $source = htmlentities($source, ENT_QUOTES | ENT_HTML5); -*/ - return $parsers[$settings->parser]($source); -} - -// Function to register a new proprocessor that will be executed just before -// an edit is saved. -$save_preprocessors = []; -function register_save_preprocessor($func) -{ - global $save_preprocessors; - $save_preprocessors[] = $func; -} - -////////////////////////////////////////////////////////////////// - - - -register_module([ - "name" => "Password hashing action", - "version" => "0.5", - "author" => "Starbeamrainbowlabs", - "description" => "Adds a utility action (that anyone can use) called hash that hashes a given string. Useful when changing a user's password.", - "id" => "action-hash", - "code" => function() { - add_action("hash", function() { - if(!isset($_GET["string"])) - { - http_response_code(422); - exit(page_renderer::render_main("Missing parameter", "

The GET parameter string must be specified.

-

It is strongly recommended that you utilise this page via a private or incognito window in order to prevent your password from appearing in your browser history.

")); - } - else - { - exit(page_renderer::render_main("Hashed string", "

" . $_GET["string"] . " → " . hash("sha256", $_GET["string"] . "

"))); - } - }); - } -]); - - + + +/////////////////////////////////////////////////////////////////////////////////////////////// +/////////////// Do not edit below this line unless you know what you are doing! /////////////// +/////////////////////////////////////////////////////////////////////////////////////////////// +$version = "v0.9-dev"; +$env = new stdClass(); +$env->action = $settings->defaultaction; +$env->page = ""; +$env->user = "Anonymous"; +$env->is_logged_in = false; +$env->is_admin = false; + +session_start(); +///////// Login System ///////// +// Clear expired sessions +if(isset($_SESSION["$settings->sessionprefix-expiretime"]) and + $_SESSION["$settings->sessionprefix-expiretime"] < time()) +{ + // Clear the session variables + $_SESSION = []; + session_destroy(); + $env->is_logged_in = false; + $env->user = "Anonymous"; +} + +if(!isset($_SESSION[$settings->sessionprefix . "-user"]) and + !isset($_SESSION[$settings->sessionprefix . "-pass"])) +{ + // The user is not logged in + $env->is_logged_in = false; +} +else +{ + $env->user = $_SESSION[$settings->sessionprefix . "-user"]; + $env->pass = $_SESSION[$settings->sessionprefix . "-pass"]; + if($settings->users[$env->user] == $env->pass) + { + // The user is logged in + $env->is_logged_in = true; + } + else + { + // The user's login details are invalid (what is going on here?) + // Unset the session variables, treat them as an anonymous user, + // and get out of here + $env->is_logged_in = false; + $env->user = "Anonymous"; + $env->pass = ""; + // Clear the session data + $_SESSION = []; //delete all the variables + session_destroy(); //destroy the session + } +} +//check to see if the currently logged in user is an admin +$env->is_admin = false; +if($env->is_logged_in) +{ + foreach($settings->admins as $admin_username) + { + if($admin_username == $env->user) + { + $env->is_admin = true; + break; + } + } +} +/////// Login System End /////// + +/////////////////////////////////////////////////////////////////////////////////////////// +//////////////////////////////////////// Functions //////////////////////////////////////// +/////////////////////////////////////////////////////////////////////////////////////////// + +/* + * @summary Converts a filesize into a human-readable string. + * @source http://php.net/manual/en/function.filesize.php#106569 + * @editor Starbeamrainbowlabs + * + * @param $bytes - The number of bytes to convert. + * @param $decimals - The number of decimal places to preserve. + */ +function human_filesize($bytes, $decimals = 2) +{ + $sz = ["B", "KB", "MB", "GB", "TB", "PB", "EB", "YB", "ZB"]; + $factor = floor((strlen($bytes) - 1) / 3); + return sprintf("%.{$decimals}f", $bytes / pow(1024, $factor)) . @$sz[$factor]; +} +/* + * @summary Calculates the time sincce a particular timestamp and returns a + * human-readable result. + * @source http://snippets.pro/snippet/137-php-convert-the-timestamp-to-human-readable-format/ + * + * @param $time - The timestamp to convert. + * + * @returns {string} - The time since the given timestamp pas a human-readable string. + */ +function human_time_since($time) +{ + $timediff = time() - $time; + $tokens = array ( + 31536000 => 'year', + 2592000 => 'month', + 604800 => 'week', + 86400 => 'day', + 3600 => 'hour', + 60 => 'minute', + 1 => 'second' + ); + foreach ($tokens as $unit => $text) { + if ($timediff < $unit) continue; + $numberOfUnits = floor($timediff / $unit); + return $numberOfUnits.' '.$text.(($numberOfUnits>1)?'s':'').' ago'; + } +} + +/* + * @summary A recursive glob() function. + * + * @param $pattern - The glob pattern to use to find filenames. + * @param $flags - The glob flags to use when finding filenames. + * + * @returns {array} - An array of the filepaths that match the given glob. + */ +// From http://in.php.net/manual/en/function.glob.php#106595 +function glob_recursive($pattern, $flags = 0) +{ + $files = glob($pattern, $flags); + foreach (glob(dirname($pattern).'/*', GLOB_ONLYDIR|GLOB_NOSORT) as $dir) + { + $prefix = "$dir/"; + // Remove the "./" from the beginning if it exists + if(substr($prefix, 0, 2) == "./") $prefix = substr($prefix, 2); + $files = array_merge($files, glob_recursive($prefix . basename($pattern), $flags)); + } + return $files; +} + +/* + * @summary Gets a list of all the sub pagess of the current page. + * + * @param $pageindex - The pageindex to use to search. + * @param $pagename - The name of the page to list the sub pages of. + * + * @returns An objectt containing all the subpages, and their respective distances from the given page name in the pageindex tree. + */ +function get_subpages($pageindex, $pagename) +{ + $pagenames = get_object_vars($pageindex); + $result = new stdClass(); + + $stem = "$pagename/"; + $stem_length = strlen($stem); + foreach($pagenames as $entry => $value) + { + if(substr($entry, 0, $stem_length) == $stem) + { + // We found a subpage + + // Extract the subpage's key relative to the page that we are searching for + $subpage_relative_key = substr($entry, $stem_length, -3); + // Calculate how many times removed the current subpage is from the current page. 0 = direct descendant. + $times_removed = substr_count($subpage_relative_key, "/"); + // Store the name of the subpage we found + $result->$entry = $times_removed; + } + } + + unset($pagenames); + return $result; +} + +/* + * @summary Makes sure that a subpage's parents exist. Note this doesn't check the pagename itself. + * + * @param The pagename to check. + * + */ +function check_subpage_parents($pagename) +{ + global $pageindex; + // Save the new pageindex and return if there aren't any more parent pages to check + if(strpos($pagename, "/") === false) + { + file_put_contents("./pageindex.json", json_encode($pageindex, JSON_PRETTY_PRINT)); + return; + } + + $parent_pagename = substr($pagename, 0, strrpos($pagename, "/")); + $parent_page_filename = "$parent_pagename.md"; + if(!file_exists($parent_page_filename)) + { + // This parent page doesn't exist! Create it and add it to the page index. + touch($parent_page_filename, 0); + + $newentry = new stdClass(); + $newentry->filename = $parent_page_filename; + $newentry->size = 0; + $newentry->lastmodified = 0; + $newentry->lasteditor = "none"; + $pageindex->$parent_pagename = $newentry; + } + + check_subpage_parents($parent_pagename); +} + +/* + * @summary makes a path safe + * + * @details paths may only contain alphanumeric characters, spaces, underscores, and dashes + */ +function makepathsafe($string) +{ + return preg_replace("/[^0-9a-zA-Z\_\-\ \/]/i", "", $string); +} + +/* + * @summary Hides an email address from bots by adding random html entities. + * + * @returns The mangled email address. + */ +function hide_email($str) +{ + $hidden_email = ""; + for($i = 0; $i < strlen($str); $i++) + { + if($str[$i] == "@") + { + $hidden_email .= "&#" . ord("@") . ";"; + continue; + } + if(rand(0, 1) == 0) + $hidden_email .= $str[$i]; + else + $hidden_email .= "&#" . ord($str[$i]) . ";"; + } + + return $hidden_email; +} + +/////////////////////////////////////////////////////////////////////////////////////////// + +/////////////////////////////////////////////////////////////////////////////////////////// +//////////////////////////// Security and Consistency Measures //////////////////////////// +/////////////////////////////////////////////////////////////////////////////////////////// + +/* + * Sort out the pageindex. We create it if it doesn't exist, and load and parse + * it if it does. + */ +if(!file_exists("./pageindex.json")) +{ + $existingpages = glob_recursive("*.md"); + $pageindex = new stdClass(); + // We use a for loop here because foreach doesn't loop over new values inserted + // while we were looping + for($i = 0; $i < count($existingpages); $i++) + { + $pagefilename = $existingpages[$i]; + + // Create a new entry + $newentry = new stdClass(); + $newentry->filename = utf8_encode($pagefilename); // Store the filename + $newentry->size = filesize($pagefilename); // Store the page size + $newentry->lastmodified = filemtime($pagefilename); // Store the date last modified + // Todo find a way to keep the last editor independent of the page index + $newentry->lasteditor = utf8_encode("unknown"); // Set the editor to "unknown" + // Extract the name of the (sub)page without the ".md" + $pagekey = utf8_encode(substr($pagefilename, 0, -3)); + + // Subpage parent checker + if(strpos($pagekey, "/") !== false) + { + // We have a sub page people + // Work out what our direct parent's key must be in order to check to + // make sure that it actually exists. If it doesn't, then we need to + // create it. + $subpage_parent_key = substr($pagekey, 0, strrpos($pagekey, "/")); + $subpage_parent_filename = "$subpage_parent_key.md"; + if(array_search($subpage_parent_filename, $existingpages) === false) + { + // Our parent page doesn't acutally exist - create it + touch($subpage_parent_filename, 0); + // Furthermore, we should add this page to the list of existing pages + // in order for it to be indexed + $existingpages[] = $subpage_parent_filename; + } + } + + // Store the new entry in the new page index + $pageindex->$pagekey = $newentry; + } + file_put_contents("./pageindex.json", json_encode($pageindex, JSON_PRETTY_PRINT)); + unset($existingpages); +} +else +{ + $pageindex = json_decode(file_get_contents("./pageindex.json")); +} + +// Work around an Opera + Syntaxtic bug where there is no margin at the left hand side if there isn't a query string when accessing a .php file +if(!isset($_GET["action"]) and !isset($_GET["page"])) +{ + http_response_code(302); + header("location: index.php?action=$settings->defaultaction&page=$settings->defaultpage"); + exit(); +} + +// Make sure that the action is set +if(!isset($_GET["action"])) + $_GET["action"] = $settings->defaultaction; +// Make sure that the page is set +if(!isset($_GET["page"]) or strlen($_GET["page"]) === 0) + $_GET["page"] = $settings->defaultpage; + +// Redirect the user to the safe version of the path if they entered an unsafe character +if(makepathsafe($_GET["page"]) !== $_GET["page"]) +{ + http_response_code(301); + header("location: index.php?action=" . rawurlencode($_GET["action"]) . "&page=" . makepathsafe($_GET["page"])); + header("x-requested-page: " . $_GET["page"]); + header("x-actual-page: " . makepathsafe($_GET["page"])); + exit(); +} + +$env->page = $_GET["page"]; +$env->action = strtolower($_GET["action"]); + +/////////////////////////////////////////////////////////////////////////////////////////// +/////////////////////////////////////////////////////////////////////////////////////////// + +//////////////////////////////////////////////////////////////////////////////////////////// +////////////////////////////////////// HTML fragments ////////////////////////////////////// +//////////////////////////////////////////////////////////////////////////////////////////// +class page_renderer +{ + public static $html_template = " + + + + {title} + + + + {header-html} + + + {body} + + + +"; + + public static $main_content_template = "{navigation-bar} +

{sitename}

+
+ {content} +
+ + + {navigation-bar-bottom} + {all-pages-datalist}"; + public static $minimal_content_template = "
{content}
+ "; + + // An array of functions that have been registered to process the + // find / replace array before the page is rendered. Note that the function + // should take a *reference* to an array as its only argument. + protected static $part_processors = []; + + // Registers a function as a part post processor. + public static function register_part_preprocessor($function) + { + global $settings; + + // Make sure that the function we are about to register is valid + if(!is_callable($function)) + { + http_response_code(500); + $admin_name = $settings->admindetails["name"]; + $admin_email = hide_email($settings->admindetails["email"]); + exit(page_renderer::render("$settings->sitename - Module Error", "

$settings->sitename has got a misbehaving module installed that tried to register an invalid HTML handler with the page renderer. Please contact $settings->sitename's administrator $admin_name at $admin_email.")); + } + + self::$part_processors[] = $function; + + return true; + } + + public static function render($title, $content, $body_template = false) + { + global $settings, $start_time, $version; + + if($body_template === false) + $body_template = self::$main_content_template; + + if(strlen($settings->logo_url) > 0) + { + // A logo url has been specified + $logo_html = ""; + switch($settings->logo_position) + { + case "left": + $logo_html = "$logo_html $settings->sitename"; + break; + case "right": + $logo_html .= " $settings->sitename"; + break; + default: + throw new Exception("Invalid logo_position '$settings->logo_position'. Valid values are either \"left\" or \"right\" and are case sensitive."); + } + } + + $parts = [ + "{body}" => $body_template, + + "{sitename}" => $logo_html, + "v0.9-dev" => $version, + "{favicon-url}" => $settings->favicon, + "{header-html}" => self::get_css_as_html(), + + "{navigation-bar}" => self::render_navigation_bar($settings->nav_links, $settings->nav_links_extra, "top"), + "{navigation-bar-bottom}" => self::render_navigation_bar($settings->nav_links_bottom, [], "bottom"), + + "{admin-details-name}" => $settings->admindetails["name"], + "{admin-details-email}" => $settings->admindetails["email"], + + "{admins-name-list}" => implode(", ", $settings->admins), + + "{generation-date}" => date("l jS \of F Y \a\\t h:ia T"), + + "{all-pages-datalist}" => self::generate_all_pages_datalist(), + + "{footer-message}" => $settings->footer_message + ]; + + // Pass the parts through the part processors + foreach(self::$part_processors as $function) + { + $function($parts); + } + + $result = self::$html_template; + + $result = str_replace(array_keys($parts), array_values($parts), $result); + + $result = str_replace([ + "{title}", + "{content}" + ], [ + $title, + $content + ], $result); + + $result = str_replace("{generation-time-taken}", microtime(true) - $start_time, $result); + return $result; + } + public static function render_main($title, $content) + { + return self::render($title, $content, self::$main_content_template); + } + public static function render_minimal($title, $content) + { + return self::render($title, $content, self::$minimal_content_template); + } + + + public static function get_css_as_html() + { + global $settings; + + if(preg_match("/^[^\/]*\/\/|^\//", $settings->css)) + return ""; + else + return ""; + } + + public static $nav_divider = " | "; + + /* + * @summary Function to render a navigation bar from an array of links. See + * $settings->nav_links for format information. + * + * @param $nav_links - The links to add to the navigation bar. + * @param $nav_links_extra - The extra nav links to add to the "More..." + * menu. + */ + public static function render_navigation_bar($nav_links, $nav_links_extra, $class = "") + { + global $settings, $env; + $result = "

"; + return $result; + } + public static function render_username($name) + { + global $settings; + $result = ""; + if(in_array($name, $settings->admins)) + $result .= $settings->admindisplaychar; + $result .= $name; + + return $result; + } + + public static function generate_all_pages_datalist() + { + global $pageindex; + + $result = "\n"; + foreach($pageindex as $pagename => $pagedetails) + { + $result .= "\t\t\t"; + + return $result; + } +} + +////////////////////////// +/// Module functions /// +////////////////////////// +// These functions are // +// used by modules to // +// register themselves // +// or new pages. // +////////////////////////// +$modules = []; // List that contains all the loaded modules +// Function to register a module +function register_module($moduledata) +{ + global $modules; + //echo("registering module\n"); + //var_dump($moduledata); + $modules[] = $moduledata; +} + +// Function to register an action handler +$actions = new stdClass(); +function add_action($action_name, $func) +{ + global $actions; + //echo("adding $action_name\n"); + $actions->$action_name = $func; +} + +// Function to register a new parser. +$parsers = [ + "none" => function() { + throw new Exception("No parser registered!"); + } +]; +function add_parser($name, $parser_code) +{ + global $parsers; + if(isset($parsers[$name])) + throw new Exception("Can't register parser with name '$name' because a parser with that name already exists."); + + $parsers[$name] = $parser_code; +} +function parse_page_source($source) +{ + global $settings, $parsers; + if(!isset($parsers[$settings->parser])) + exit(page_renderer::render_main("Parsing error - $settings->sitename", "

Parsing some page source data failed. This is most likely because $settings->sitename has the parser setting set incorrectly. Please contact " . $settings->admindetails["name"] . ", your $settings->sitename Administrator.")); + +/* Not needed atm because escaping happens when saving, not when rendering * + if($settings->clean_raw_html) + $source = htmlentities($source, ENT_QUOTES | ENT_HTML5); +*/ + return $parsers[$settings->parser]($source); +} + +// Function to register a new proprocessor that will be executed just before +// an edit is saved. +$save_preprocessors = []; +function register_save_preprocessor($func) +{ + global $save_preprocessors; + $save_preprocessors[] = $func; +} + +////////////////////////////////////////////////////////////////// + + + +register_module([ + "name" => "Password hashing action", + "version" => "0.5", + "author" => "Starbeamrainbowlabs", + "description" => "Adds a utility action (that anyone can use) called hash that hashes a given string. Useful when changing a user's password.", + "id" => "action-hash", + "code" => function() { + add_action("hash", function() { + global $settings; + + if(!isset($_GET["string"])) + { + http_response_code(422); + exit(page_renderer::render_main("Missing parameter", "

The GET parameter string must be specified.

+

It is strongly recommended that you utilise this page via a private or incognito window in order to prevent your password from appearing in your browser history.

")); + } + else + { + exit(page_renderer::render_main("Hashed string", "

Algorithm: " . ($settings->use_sha3 ? "sha3" : "sha256") . "

\n

" . $_GET["string"] . " → " . hash_password($_GET["string"]) . "

")); + } + }); + } +]); + + register_module([ @@ -1002,115 +1009,115 @@ register_module([ - -register_module([ - "name" => "Sidebar", - "version" => "0.2", - "author" => "Starbeamrainbowlabs", - "description" => "Adds a sidebar to the left hand side of every page. Add '\$settings->sidebar_show = true;' to your configuration, or append '&sidebar=yes' to the url to enable. Adding to the url sets a cookie to remember your setting.", - "id" => "extra-sidebar", - "code" => function() { - $show_sidebar = false; - - // Show the sidebar if it is enabled in the settings - if(isset($settings->sidebar_show) && $settings->sidebar_show === true) - $show_sidebar = true; - - // Also show and persist the sidebar if the special GET parameter - // sidebar is seet - if(!$show_sidebar && isset($_GET["sidebar"])) - { - $show_sidebar = true; - // Set a cookie to persist the display of the sidebar - setcookie("sidebar_show", "true", time() + (60 * 60 * 24 * 30)); - } - - // Show the sidebar if the cookie is set - if(!$show_sidebar && isset($_COOKIE["sidebar_show"])) - $show_sidebar = true; - - // Delete the cookie and hide the sidebar if the special GET paramter - // nosidebar is set - if(isset($_GET["nosidebar"])) - { - $show_sidebar = false; - unset($_COOKIE["sidebar_show"]); - setcookie("sidebar_show", null, time() - 3600); - } - - page_renderer::register_part_preprocessor(function(&$parts) use ($show_sidebar) { - global $settings, $pageindex; - - if($show_sidebar && !isset($_GET["printable"])) - { - // Show the sidebar - $exec_start = microtime(true); - - // Sort the pageindex - $sorted_pageindex = get_object_vars($pageindex); - ksort($sorted_pageindex, SORT_NATURAL); - - $sidebar_contents = ""; - $sidebar_contents .= render_sidebar($sorted_pageindex); - - $parts["{body}"] = " -
" . $parts["{body}"] . "
- - "; - } - }); - } -]); - -/* - * @summary Renders the sidebar for a given pageindex. - * - * @param $pageindex {array} - The pageindex to render the sidebar for - * @param $root_pagename {string} - The pagename that should be considered the root of the rendering. You don't usually need to use this, it is used by the algorithm itself since it is recursive. - * - * @returns {string} A HTML rendering of the sidebar for the given pageindex - */ -function render_sidebar($pageindex, $root_pagename = "") -{ - global $settings; - - $result = " $details) - { - // If we have a valid root pagename, and it isn't present at the - // beginning of the current pagename, skip it - if($root_pagename !== "" && strpos($pagename, $root_pagename) !== 0) - continue; - - // The current page is the same as the root page, skip it - if($pagename == $root_pagename) - continue; - - - // If the part of the current pagename that comes after the root - // pagename has a slash in it, skip it as it is a sub-sub page. - if(strpos(substr($pagename, strlen($root_pagename)), "/") !== false) - continue; - - $result .= "
  • $pagename\n"; - $result .= render_sidebar($pageindex, $pagename); - $result .= "
    • \n"; - } - $result .= "\n"; - - return $result == "\n" ? "" : $result; -} - - + +register_module([ + "name" => "Sidebar", + "version" => "0.2", + "author" => "Starbeamrainbowlabs", + "description" => "Adds a sidebar to the left hand side of every page. Add '\$settings->sidebar_show = true;' to your configuration, or append '&sidebar=yes' to the url to enable. Adding to the url sets a cookie to remember your setting.", + "id" => "extra-sidebar", + "code" => function() { + $show_sidebar = false; + + // Show the sidebar if it is enabled in the settings + if(isset($settings->sidebar_show) && $settings->sidebar_show === true) + $show_sidebar = true; + + // Also show and persist the sidebar if the special GET parameter + // sidebar is seet + if(!$show_sidebar && isset($_GET["sidebar"])) + { + $show_sidebar = true; + // Set a cookie to persist the display of the sidebar + setcookie("sidebar_show", "true", time() + (60 * 60 * 24 * 30)); + } + + // Show the sidebar if the cookie is set + if(!$show_sidebar && isset($_COOKIE["sidebar_show"])) + $show_sidebar = true; + + // Delete the cookie and hide the sidebar if the special GET paramter + // nosidebar is set + if(isset($_GET["nosidebar"])) + { + $show_sidebar = false; + unset($_COOKIE["sidebar_show"]); + setcookie("sidebar_show", null, time() - 3600); + } + + page_renderer::register_part_preprocessor(function(&$parts) use ($show_sidebar) { + global $settings, $pageindex; + + if($show_sidebar && !isset($_GET["printable"])) + { + // Show the sidebar + $exec_start = microtime(true); + + // Sort the pageindex + $sorted_pageindex = get_object_vars($pageindex); + ksort($sorted_pageindex, SORT_NATURAL); + + $sidebar_contents = ""; + $sidebar_contents .= render_sidebar($sorted_pageindex); + + $parts["{body}"] = " +
    " . $parts["{body}"] . "
    + + "; + } + }); + } +]); + +/* + * @summary Renders the sidebar for a given pageindex. + * + * @param $pageindex {array} - The pageindex to render the sidebar for + * @param $root_pagename {string} - The pagename that should be considered the root of the rendering. You don't usually need to use this, it is used by the algorithm itself since it is recursive. + * + * @returns {string} A HTML rendering of the sidebar for the given pageindex + */ +function render_sidebar($pageindex, $root_pagename = "") +{ + global $settings; + + $result = " $details) + { + // If we have a valid root pagename, and it isn't present at the + // beginning of the current pagename, skip it + if($root_pagename !== "" && strpos($pagename, $root_pagename) !== 0) + continue; + + // The current page is the same as the root page, skip it + if($pagename == $root_pagename) + continue; + + + // If the part of the current pagename that comes after the root + // pagename has a slash in it, skip it as it is a sub-sub page. + if(strpos(substr($pagename, strlen($root_pagename)), "/") !== false) + continue; + + $result .= "
  • $pagename\n"; + $result .= render_sidebar($pageindex, $pagename); + $result .= "
    • \n"; + } + $result .= "\n"; + + return $result == "
      \n" ? "" : $result; +} + + register_module([ @@ -1144,955 +1151,978 @@ register_module([ - -register_module([ - "name" => "Credits", - "version" => "0.6", - "author" => "Starbeamrainbowlabs", - "description" => "Adds the credits page. You *must* have this module :D", - "id" => "page-credits", - "code" => function() { - add_action("credits", function() { - global $settings, $version, $pageindex, $modules; - - $credits = [ - "Code" => [ - "author" => "Starbeamrainbowlabs", - "author_url" => "https://starbeamrmainbowlabs.com/", - "thing_url" => "https://github.com/sbrl/Pepprminty-Wiki" - ], - "Slightly modified version of Slimdown" => [ - "author" => "Johnny Broadway", - "author_url" => "https://github.com/jbroadway", - "thing_url" => "https://gist.github.com/jbroadway/2836900" - ], - "Default Favicon" => [ - "author" => "bluefrog23", - "author_url" => "https://openclipart.org/user-detail/bluefrog23/", - "thing_url" => "https://openclipart.org/detail/19571/peppermint-candy-by-bluefrog23" - ], - "Bug Reports" => [ - "author" => "nibreh", - "author_url" => "https://github.com/nibreh/", - "thing_url" => "" - ] - ]; - - //// Credits html renderer //// - $credits_html = "
        \n"; - foreach($credits as $thing => $author_details) - { - $credits_html .= "
      • "; - $credits_html .= "$thing by "; - $credits_html .= "" . $author_details["author"] . ""; - $credits_html .= "
        • \n"; - } - $credits_html .= "
      "; - /////////////////////////////// - - //// Module html renderer //// - $modules_html = " - - - - - - "; - foreach($modules as $module) - { - $modules_html .= " - - - - - \n"; - } - $modules_html .= "
      NameVersionAuthorDescription
      " . $module["name"] . "" . $module["version"] . "" . $module["author"] . "" . $module["description"] . "
      "; - ////////////////////////////// - - $title = "Credits - $settings->sitename"; - $content = "

      $settings->sitename credits

      -

      $settings->sitename is powered by Pepperminty Wiki - an entire wiki packed inside a single file, which was built by Starbeamrainbowlabs, and can be found on GitHub (contributors will ablso be listed here in the future).

      -

      Main Credits

      - $credits_html -

      Site status

      - - - - - -
      Site name:$settings->sitename (Update - Administrators only, Export as zip - Check for permission first)
      Pepperminty Wiki version:$version
      Number of pages:" . count(get_object_vars($pageindex)) . "
      Number of modules:" . count($modules) . "
      -

      Installed Modules

      - $modules_html"; - exit(page_renderer::render_main($title, $content)); - }); - } -]); - - - -register_module([ - "name" => "Page deleter", - "version" => "0.6", - "author" => "Starbeamrainbowlabs", - "description" => "Adds an action to allow administrators to delete pages.", - "id" => "page-delete", - "code" => function() { - add_action("delete", function() { - global $pageindex, $settings, $env; - if(!$settings->editing) - { - exit(page_renderer::render_main("Deleting $env->page - error", "

      You tried to delete $env->page, but editing is disabled on this wiki.

      -

      If you wish to delete this page, please re-enable editing on this wiki first.

      -

      Go back to $env->page.

      -

      Nothing has been changed.

      ")); - } - if(!$env->is_admin) - { - exit(page_renderer::render_main("Deleting $env->page - error", "

      You tried to delete $env->page, but you are not an admin so you don't have permission to do that.

      -

      You should try logging in as an admin.

      ")); - } - if(!isset($_GET["delete"]) or $_GET["delete"] !== "yes") - { - exit(page_renderer::render_main("Deleting $env->page", "

      You are about to delete $env->page. You can't undo this!

      -

      Click here to delete $env->page.

      -

      Click here to go back.")); - } - $page = $env->page; - unset($pageindex->$page); //delete the page from the page index - file_put_contents("./pageindex.json", json_encode($pageindex, JSON_PRETTY_PRINT)); //save the new page index - unlink("./$env->page.md"); //delete the page from the disk - - exit(page_renderer::render_main("Deleting $env->page - $settings->sitename", "

      $env->page has been deleted. Go back to the main page.

      ")); - }); - } -]); - - +register_module([ + "name" => "Credits", + "version" => "0.6", + "author" => "Starbeamrainbowlabs", + "description" => "Adds the credits page. You *must* have this module :D", + "id" => "page-credits", + "code" => function() { + add_action("credits", function() { + global $settings, $version, $pageindex, $modules; + + $credits = [ + "Code" => [ + "author" => "Starbeamrainbowlabs", + "author_url" => "https://starbeamrmainbowlabs.com/", + "thing_url" => "https://github.com/sbrl/Pepprminty-Wiki" + ], + "Slightly modified version of Slimdown" => [ + "author" => "Johnny Broadway", + "author_url" => "https://github.com/jbroadway", + "thing_url" => "https://gist.github.com/jbroadway/2836900" + ], + "Default Favicon" => [ + "author" => "bluefrog23", + "author_url" => "https://openclipart.org/user-detail/bluefrog23/", + "thing_url" => "https://openclipart.org/detail/19571/peppermint-candy-by-bluefrog23" + ], + "Bug Reports" => [ + "author" => "nibreh", + "author_url" => "https://github.com/nibreh/", + "thing_url" => "" + ] + ]; + + //// Credits html renderer //// + $credits_html = "
        \n"; + foreach($credits as $thing => $author_details) + { + $credits_html .= "
      • "; + $credits_html .= "$thing by "; + $credits_html .= "" . $author_details["author"] . ""; + $credits_html .= "
        • \n"; + } + $credits_html .= "
      "; + /////////////////////////////// + + //// Module html renderer //// + $modules_html = " + + + + + + "; + foreach($modules as $module) + { + $modules_html .= " + + + + + \n"; + } + $modules_html .= "
      NameVersionAuthorDescription
      " . $module["name"] . "" . $module["version"] . "" . $module["author"] . "" . $module["description"] . "
      "; + ////////////////////////////// + + $title = "Credits - $settings->sitename"; + $content = "

      $settings->sitename credits

      +

      $settings->sitename is powered by Pepperminty Wiki - an entire wiki packed inside a single file, which was built by Starbeamrainbowlabs, and can be found on GitHub (contributors will ablso be listed here in the future).

      +

      Main Credits

      + $credits_html +

      Site status

      + + + + + +
      Site name:$settings->sitename (Update - Administrators only, Export as zip - Check for permission first)
      Pepperminty Wiki version:$version
      Number of pages:" . count(get_object_vars($pageindex)) . "
      Number of modules:" . count($modules) . "
      +

      Installed Modules

      + $modules_html"; + exit(page_renderer::render_main($title, $content)); + }); + } +]); - -register_module([ - "name" => "Page editor", - "version" => "0.11", - "author" => "Starbeamrainbowlabs", - "description" => "Allows you to edit pages by adding the edit and save actions. You should probably include this one.", - "id" => "page-edit", - - "code" => function() { - - /* - * _ _ _ - * ___ __| (_) |_ - * / _ \/ _` | | __| - * | __/ (_| | | |_ - * \___|\__,_|_|\__| - * %edit% - */ - add_action("edit", function() { - global $pageindex, $settings, $env; - - $filename = "$env->page.md"; - $page = $env->page; - $creatingpage = !isset($pageindex->$page); - if((isset($_GET["newpage"]) and $_GET["newpage"] == "true") or $creatingpage) - { - $title = "Creating $env->page"; - } - else - { - $title = "Editing $env->page"; - } - - $pagetext = ""; - if(isset($pageindex->$page)) - { - $pagetext = file_get_contents($filename); - } - - if((!$env->is_logged_in and !$settings->anonedits) or // if we aren't logged in and anonymous edits are disbled - !$settings->editing or// or editing is disabled - ( - isset($pageindex->$page) and // the page exists - isset($pageindex->$page->protect) and // the protect property exists - $pageindex->$page->protect and // the protect property is true - !$env->is_admin // the user isn't an admin - ) - ) - { - if(!$creatingpage) - { - // The page already exists - let the user view the page source - exit(page_renderer::render_main("Viewing source for $env->page", "

      $settings->sitename does not allow anonymous users to make edits. If you are in fact logged in, then this page is probably protected, and you aren't an administrator or moderator. You can view the source of $env->page below, but you can't edit it.

      ")); - } - else - { - http_response_code(404); - exit(page_renderer::render_main("404 - $env->page", "

      The page $env->page does not exist, but you do not have permission to create it.

      If you haven't already, perhaps you should try logging in.

      ")); - } - } - - $content = "

      $title

      "; - if(!$env->is_logged_in and $settings->anonedits) - { - $content .= "

      Warning: You are not logged in! Your IP address may be recorded.

      "; - } - $content .= "
      - -

      $settings->editing_message

      - -
      "; - exit(page_renderer::render_main("$title - $settings->sitename", $content)); - }); - - /* - * - * ___ __ ___ _____ - * / __|/ _` \ \ / / _ \ - * \__ \ (_| |\ V / __/ - * |___/\__,_| \_/ \___| - * %save% - */ - add_action("save", function() { - global $pageindex, $settings, $env, $save_preprocessors; - if(!$settings->editing) - { - header("location: index.php?page=$env->page"); - exit(page_renderer::render_main("Error saving edit", "

      Editing is currently disabled on this wiki.

      ")); - } - if(!$env->is_logged_in and !$settings->anonedits) - { - http_response_code(403); - header("refresh: 5; url=index.php?page=$env->page"); - exit("You are not logged in, so you are not allowed to save pages on $settings->sitename. Redirecting in 5 seconds...."); - } - $page = $env->page; - if(( - isset($pageindex->$page) and - isset($pageindex->page->protect) and - $pageindex->$page->protect - ) and !$env->is_admin) - { - http_response_code(403); - header("refresh: 5; url=index.php?page=$env->page"); - exit("$env->page is protected, and you aren't logged in as an administrastor or moderator. Your edit was not saved. Redirecting in 5 seconds..."); - } - if(!isset($_POST["content"])) - { - http_response_code(400); - header("refresh: 5; url=index.php?page=$env->page"); - exit("Bad request: No content specified."); - } - - // Make sure that the directory in which the page needs to be saved exists - if(!is_dir(dirname("$env->page.md"))) - { - // Recursively create the directory if needed - mkdir(dirname("$env->page.md"), null, true); - } - - - $pagedata = $_POST["content"]; - - if($settings->clean_raw_html) - $pagedata = htmlentities($pagedata, ENT_QUOTES); - - if(file_put_contents("$env->page.md", $pagedata) !== false) - { - $page = $env->page; - // Make sure that this page's parents exist - check_subpage_parents($page); - - // Update the page index - if(!isset($pageindex->$page)) - { - $pageindex->$page = new stdClass(); - $pageindex->$page->filename = "$env->page.md"; - } - $pageindex->$page->size = strlen($_POST["content"]); - $pageindex->$page->lastmodified = time(); - if($env->is_logged_in) - $pageindex->$page->lasteditor = utf8_encode($env->user); - else - $pageindex->$page->lasteditor = utf8_encode("anonymous"); - - // A hack to resave the pagedata if the preprocessors have - // changed it. We need this because the preprocessors *must* - // run _after_ the pageindex has been updated. - $pagedata_orig = $pagedata; - - // Execute all the preprocessors - foreach($save_preprocessors as $func) - { - $func($pageindex->$page, $pagedata); - } - - if($pagedata !== $pagedata_orig) - file_put_contents("$env->page.md", $pagedata); - - - file_put_contents("./pageindex.json", json_encode($pageindex, JSON_PRETTY_PRINT)); - - if(isset($_GET["newpage"])) - http_response_code(201); - else - http_response_code(200); - - header("location: index.php?page=$env->page&edit_status=success&redirect=no"); - exit(); - } - else - { - http_response_code(507); - exit(page_renderer::render_main("Error saving page - $settings->sitename", "

      $settings->sitename failed to write your changes to the disk. Your changes have not been saved, but you might be able to recover your edit by pressing the back button in your browser.

      -

      Please tell the administrator of this wiki (" . $settings->admindetails["name"] . ") about this problem.

      ")); - } - }); - } -]); - - - -register_module([ - "name" => "Export", - "version" => "0.2", - "author" => "Starbeamrainbowlabs", - "description" => "Adds a page that you can use to export your wiki as a .zip file. Uses \$settings->export_only_allow_admins, which controls whether only admins are allowed to export the wiki.", - "id" => "page-export", - "code" => function() { - add_action("export", function() { - global $settings, $pageindex, $env; - - if($settings->export_allow_only_admins && !$env->is_admin) - { - http_response_code(401); - exit(page_renderer::render("Export error - $settings->sitename", "Only administrators of $settings->sitename are allowed to export the wiki as a zip. Return to the $settings->defaultpage.")); - } - - $tmpfilename = tempnam(sys_get_temp_dir(), "pepperminty-wiki-"); - - $zip = new ZipArchive(); - - if($zip->open($tmpfilename, ZipArchive::CREATE) !== true) - { - http_response_code(507); - exit(page_renderer::render("Export error - $settings->sitename", "Pepperminty Wiki was unable to open a temporary file to store the exported data in. Please contact $settings->sitename's administrator (" . $settings->admindetails["name"] . " at " . hide_email($settings->admindetails["email"]) . ") for assistance.")); - } - - foreach($pageindex as $entry) - { - $zip->addFile("./$entry->filename", $entry->filename); - } - - if($zip->close() !== true) - { - http_response_code(500); - exit(page_renderer::render("Export error - $settings->sitename", "Pepperminty wiki was unable to close the temporary zip file after creating it. Please contact $settings->sitename's administrator (" . $settings->admindetails["name"] . " at " . hide_email($settings->admindetails["email"]) . ") for assistance.")); - } - - header("content-type: application/zip"); - header("content-disposition: attachment; filename=$settings->sitename-export.zip"); - header("content-length: " . filesize($tmpfilename)); - - $zip_handle = fopen($tmpfilename, "rb"); - fpassthru($zip_handle); - fclose($zip_handle); - unlink($tmpfilename); - }); - } -]); - - - -register_module([ - "name" => "Help page", - "version" => "0.6", - "author" => "Starbeamrainbowlabs", - "description" => "Adds the help action. You really want this one.", - "id" => "page-help", - "code" => function() { - add_action("help", function() { - global $settings, $version; - - $title = "Help - $settings->sitename"; - $content = "

      $settings->sitename Help

      -

      Welcome to $settings->sitename!

      -

      $settings->sitename is powered by Pepperminty wiki, a complete wiki in a box you can drop into your server.

      -

      Navigating

      -

      All the navigation links can be found in the top right corner, along with a box in which you can type a page name and hit enter to be taken to that page (if your site administrator has enabled it).

      -

      In order to edit pages on $settings->sitename, you probably need to be logged in. If you do not already have an account you will need to ask $settings->sitename's administrator for an account since there is not registration form. Note that the $settings->sitename's administrator may have changed these settings to allow anonymous edits.

      -

      Editing

      -

      $settings->sitename's editor uses a modified version of slimdown, a flavour of markdown that is implementated using regular expressions. See the credits page for more information and links to the original source for this. A quick reference can be found below:

      - - - - - - - - - - - - - - - - - -
      Type ThisTo get this
      _italics_italics
      *bold*bold
      ~~Strikethrough~~Strikethough
      `code`code
      # Heading

      Heading

      ## Sub Heading

      Sub Heading

      [[Internal Link]]Internal Link
      [[Display Text|Internal Link]]Display Text
      [Display text](//google.com/)Display Text
      > Blockquote
      > Some text
      Blockquote
      Some text
      - Apples
      * Oranges
      • Apples
      • Oranges
      1. This is
      2. an ordered list
      1. This is
      2. an ordered list
      - --- -
      ![Alt text](//starbeamrainbowlabs.com/favicon-small.png)Alt text
      - -

      In addition, the following extra syntax is supported for images:

      - - 
      Size the image to at most 250 pixels wide:
-![Alt text](//starbeamrainbowlabs.com/favicon-small.png 250px)
-
-Size the image to at most 120px wide and have it float at the right ahnd size of the page:
-![Alt text](//starbeamrainbowlabs.com/favicon-small.png 120px right)
      - -

      Administrator Actions

      -

      By default, the delete and move actions are shown on the nav bar. These can be used by administrators to delete or move pages.

      -

      The other thing admininistrators can do is update the wiki (provided they know the site's secret). This page can be found here: Update $settings->sitename.

      -

      $settings->sitename is currently running on Pepperminty Wiki $version

      "; - exit(page_renderer::render_main($title, $content)); - }); - } -]); - - - -register_module([ - "name" => "Page list", - "version" => "0.6", - "author" => "Starbeamrainbowlabs", - "description" => "Adds a page that lists all the pages in the index along with their metadata.", - "id" => "page-list", - "code" => function() { - add_action("list", function() { - global $pageindex, $settings; - - $sorted_pageindex = get_object_vars($pageindex); - ksort($sorted_pageindex, SORT_NATURAL); - $title = "All Pages"; - $content = "

      $title on $settings->sitename

      - - - - - - - \n"; - foreach($sorted_pageindex as $pagename => $pagedetails) - { - $content .= "\t\t - - - - - - \n"; - } - $content .= "
      Page NameSizeLast EditorLast Edit Time
      $pagename" . human_filesize($pagedetails->size) . "$pagedetails->lasteditor" . human_time_since($pagedetails->lastmodified) . " (" . date("l jS \of F Y \a\\t h:ia T", $pagedetails->lastmodified) . ")
      "; - exit(page_renderer::render_main("$title - $settings->sitename", $content)); - }); - } -]); - - +register_module([ + "name" => "Page deleter", + "version" => "0.6", + "author" => "Starbeamrainbowlabs", + "description" => "Adds an action to allow administrators to delete pages.", + "id" => "page-delete", + "code" => function() { + add_action("delete", function() { + global $pageindex, $settings, $env; + if(!$settings->editing) + { + exit(page_renderer::render_main("Deleting $env->page - error", "

      You tried to delete $env->page, but editing is disabled on this wiki.

      +

      If you wish to delete this page, please re-enable editing on this wiki first.

      +

      Go back to $env->page.

      +

      Nothing has been changed.

      ")); + } + if(!$env->is_admin) + { + exit(page_renderer::render_main("Deleting $env->page - error", "

      You tried to delete $env->page, but you are not an admin so you don't have permission to do that.

      +

      You should try logging in as an admin.

      ")); + } + if(!isset($_GET["delete"]) or $_GET["delete"] !== "yes") + { + exit(page_renderer::render_main("Deleting $env->page", "

      You are about to delete $env->page. You can't undo this!

      +

      Click here to delete $env->page.

      +

      Click here to go back.")); + } + $page = $env->page; + unset($pageindex->$page); //delete the page from the page index + file_put_contents("./pageindex.json", json_encode($pageindex, JSON_PRETTY_PRINT)); //save the new page index + unlink("./$env->page.md"); //delete the page from the disk - -register_module([ - "name" => "Login", - "version" => "0.6", - "author" => "Starbeamrainbowlabs", - "description" => "Adds a pair of actions (login and checklogin) that allow users to login. You need this one if you want your users to be able to login.", - "id" => "page-login", - "code" => function() { - /* - * _ _ - * | | ___ __ _(_)_ __ - * | |/ _ \ / _` | | '_ \ - * | | (_) | (_| | | | | | - * |_|\___/ \__, |_|_| |_| - * |___/ %login% - */ - add_action("login", function() { - global $settings; - $title = "Login to $settings->sitename"; - $content = "

      Login to $settings->sitename

      \n"; - if(isset($_GET["failed"])) - $content .= "\t\t

      Login failed.

      \n"; - $content .= "\t\t
      - - -
      - - -
      - -
      "; - exit(page_renderer::render_main($title, $content)); - }); - - /* - * _ _ _ _ - * ___| |__ ___ ___| | _| | ___ __ _(_)_ __ - * / __| '_ \ / _ \/ __| |/ / |/ _ \ / _` | | '_ \ - * | (__| | | | __/ (__| <| | (_) | (_| | | | | | - * \___|_| |_|\___|\___|_|\_\_|\___/ \__, |_|_| |_| - * %checklogin% |___/ - */ - add_action("checklogin", function() { - global $settings, $env; - - //actually do the login - if(isset($_POST["user"]) and isset($_POST["pass"])) - { - //the user wants to log in - $user = $_POST["user"]; - $pass = $_POST["pass"]; - if($settings->users[$user] == hash("sha256", $pass)) - { - $env->is_logged_in = true; - $expiretime = time() + 60*60*24*30; //30 days from now - $_SESSION["$settings->sessionprefix-user"] = $user; - $_SESSION["$settings->sessionprefix-pass"] = hash("sha256", $pass); - $_SESSION["$settings->sessionprefix-expiretime"] = $expiretime; - //redirect to wherever the user was going - http_response_code(302); - if(isset($_POST["goto"])) - header("location: " . $_POST["returnto"]); - else - header("location: index.php"); - exit(); - } - else - { - http_response_code(302); - header("location: index.php?action=login&failed=yes"); - exit(); - } - } - else - { - http_response_code(302); - header("location: index.php?action=login&failed=yes&badrequest=yes"); - exit(); - } - }); - } -]); - + exit(page_renderer::render_main("Deleting $env->page - $settings->sitename", "

      $env->page has been deleted. Go back to the main page.

      ")); + }); + } +]); - -register_module([ - "name" => "Logout", - "version" => "0.6", - "author" => "Starbeamrainbowlabs", - "description" => "Adds an action to let users user out. For security reasons it is wise to add this module since logging in automatically opens a session that is valid for 30 days.", - "id" => "page-logout", - "code" => function() { - add_action("logout", function() { - global $env; - $env->is_logged_in = false; - unset($env->user); - unset($env->pass); - //clear the session variables - $_SESSION = []; - session_destroy(); - - exit(page_renderer::render_main("Logout Successful", "

      Logout Successful

      -

      Logout Successful. You can login again here.

      ")); - }); - } -]); - - - -register_module([ - "name" => "Page mover", - "version" => "0.6", - "author" => "Starbeamrainbowlabs", - "description" => "Adds an action to allow administrators to move pages.", - "id" => "page-move", - "code" => function() { - add_action("move", function() { - global $pageindex, $settings, $env; - if(!$settings->editing) - { - exit(page_renderer::render_main("Moving $env->page - error", "

      You tried to move $env->page, but editing is disabled on this wiki.

      -

      If you wish to move this page, please re-enable editing on this wiki first.

      -

      Go back to $env->page.

      -

      Nothing has been changed.

      ")); - } - if(!$env->is_admin) - { - exit(page_renderer::render_main("Moving $env->page - Error", "

      You tried to move $env->page, but you do not have permission to do that.

      -

      You should try logging in as an admin.

      ")); - } - - if(!isset($_GET["new_name"]) or strlen($_GET["new_name"]) == 0) - exit(page_renderer::render_main("Moving $env->page", "

      Moving $env->page

      -
      - - - -
      - - -
      - -
      ")); - - $new_name = makepathsafe($_GET["new_name"]); - - $page = $env->page; - if(!isset($pageindex->$page)) - exit(page_renderer::render_main("Moving $env->page - Error", "

      You tried to move $env->page to $new_name, but the page with the name $env->page does not exist in the first place.

      -

      Nothing has been changed.

      ")); - - if($env->page == $new_name) - exit(page_renderer::render_main("Moving $env->page - Error", "

      You tried to move $page, but the new name you gave is the same as it's current name.

      -

      It is possible that you tried to use some characters in the new name that are not allowed and were removed.

      -

      Page names may only contain alphanumeric characters, dashes, and underscores.

      ")); - - //move the page in the page index - $pageindex->$new_name = new stdClass(); - foreach($pageindex->$page as $key => $value) - { - $pageindex->$new_name->$key = $value; - } - unset($pageindex->$page); - file_put_contents("./pageindex.json", json_encode($pageindex, JSON_PRETTY_PRINT)); - - //move the page on the disk - rename("$env->page.md", "$new_name.md"); - - exit(page_renderer::render_main("Moving $env->page", "

      $env->page has been moved to $new_name successfully.

      ")); - }); - } -]); - - - -register_module([ - "name" => "Update", - "version" => "0.6.1", - "author" => "Starbeamrainbowlabs", - "description" => "Adds an update page that downloads the latest stable version of Pepperminty Wiki. This module is currently outdated as it doesn't save your module preferences.", - "id" => "page-update", - "code" => function() { - add_action("update", function() { - global $settings, $env; - - if(!$env->is_admin) - { - http_response_code(401); - exit(page_renderer::render_main("Update - Error", "

      You must be an administrator to do that.

      ")); - } - - if(!isset($_GET["do"]) or $_GET["do"] !== "true") - { - exit(page_renderer::render_main("Update $settings->sitename", "

      This page allows you to update $settings->sitename.

      -

      Currently, $settings->sitename is using $settings->version of Pepperminty Wiki.

      -

      This script will automatically download and install the latest version of Pepperminty Wiki from the url of your choice (see settings), regardless of whether an update is actually needed (version checking isn't implemented yet).

      -

      To update $settings->sitename, fill out the form below and click click the update button.

      -

      Note that a backup system has not been implemented yet! If this script fails you will loose your wiki's code and have to re-build it.

      -
      - - - - - -
      ")); - } - - if(!isset($_GET["secret"]) or $_GET["secret"] !== $settings->sitesecret) - { - exit(page_renderer::render_main("Update $settings->sitename - Error", "

      You forgot to enter $settings->sitename's secret code or entered it incorrectly. $settings->sitename's secret can be found in the settings portion of index.php.

      ")); - } - - $settings_separator = "/////////////// Do not edit below this line unless you know what you are doing! ///////////////"; - - $log = "Beginning update...\n"; - - $log .= "I am " . __FILE__ . ".\n"; - $oldcode = file_get_contents(__FILE__); - $log .= "Fetching new code..."; - $newcode = file_get_contents($settings->updateurl); - $log .= "done.\n"; - - $log .= "Rewriting " . __FILE__ . "..."; - $settings = substr($oldcode, 0, strpos($oldcode, $settings_separator)); - $code = substr($newcode, strpos($newcode, $settings_separator)); - $result = $settings . $code; - $log .= "done.\n"; - - $log .= "Saving..."; - file_put_contents(__FILE__, $result); - $log .= "done.\n"; - - $log .= "Update complete. I am now running on the latest version of Pepperminty Wiki."; - $log .= "The version number that I have updated to can be found on the credits or help ages."; - - exit(page_renderer::render_main("Update - Success", "
      • " . implode("
      • ", explode("\n", $log)) . "
      ")); - }); - } -]); - - -register_module([ - "name" => "Page viewer", - "version" => "0.11", - "author" => "Starbeamrainbowlabs", - "description" => "Allows you to view pages. You reallyshould include this one.", - "id" => "page-view", - "code" => function() { - add_action("view", function() { - global $pageindex, $settings, $env; - - // Check to make sure that the page exists - $page = $env->page; - if(!isset($pageindex->$page)) - { - // todo make this intelligent so we only redirect if the user is acutally able to create the page - if($settings->editing) - { - // Editing is enabled, redirect to the editing page - http_response_code(307); // Temporary redirect - header("location: index.php?action=edit&newpage=yes&page=" . rawurlencode($env->page)); - exit(); - } - else - { - // Editing is disabled, show an error message - http_response_code(404); - exit(page_renderer::render_main("$env->page - 404 - $settings->sitename", "

      $env->page does not exist.

      Since editing is currently disabled on this wiki, you may not create this page. If you feel that this page should exist, try contacting this wiki's Administrator.

      ")); - } - } - - // Perform a redirect if the requested page is a redirect page - if(isset($pageindex->$page->redirect) && - $pageindex->$page->redirect === true) - { - $send_redirect = true; - if(isset($_GET["redirect"]) && $_GET["redirect"] == "no") - $send_redirect = false; - - if($send_redirect) - { - // Todo send an explanatory page along with the redirect - http_response_code(307); - header("location: ?action=$env->action&page=" . $pageindex->$page->redirect_target . "&redirected_from=$env->page"); - exit(); - } - } - - $title = "$env->page - $settings->sitename"; - if(isset($pageindex->$page->protect) && $pageindex->$page->protect === true) - $title = $settings->protectedpagechar . $title; - $content = "

      $env->page

      \n"; - - // Add an extra message if the requested was redirected from another page - if(isset($_GET["redirected_from"])) - $content .= "

      Redirected from " . $_GET["redirected_from"] . ".

      "; - - $parsing_start = microtime(true); - - $content .= parse_page_source(file_get_contents("$env->page.md")); - - if($settings->show_subpages) - { - $subpages = get_object_vars(get_subpages($pageindex, $env->page)); - - if(count($subpages) > 0) - { - $content .= "
      "; - $content .= "Subpages: "; - foreach($subpages as $subpage => $times_removed) - { - if($times_removed <= $settings->subpages_display_depth) - { - $content .= "$subpage, "; - } - } - // Remove the last comma from the content - $content = substr($content, 0, -2); - } - } - - $content .= "\n\t\t\n"; - - if(isset($_GET["printable"]) and $_GET["printable"] === "yes") - exit(page_renderer::render_minimal($title, $content)); - else - exit(page_renderer::render_main($title, $content)); - }); - } -]); - - +register_module([ + "name" => "Page editor", + "version" => "0.11", + "author" => "Starbeamrainbowlabs", + "description" => "Allows you to edit pages by adding the edit and save actions. You should probably include this one.", + "id" => "page-edit", + + "code" => function() { + + /* + * _ _ _ + * ___ __| (_) |_ + * / _ \/ _` | | __| + * | __/ (_| | | |_ + * \___|\__,_|_|\__| + * %edit% + */ + add_action("edit", function() { + global $pageindex, $settings, $env; + + $filename = "$env->page.md"; + $page = $env->page; + $creatingpage = !isset($pageindex->$page); + if((isset($_GET["newpage"]) and $_GET["newpage"] == "true") or $creatingpage) + { + $title = "Creating $env->page"; + } + else + { + $title = "Editing $env->page"; + } + + $pagetext = ""; + if(isset($pageindex->$page)) + { + $pagetext = file_get_contents($filename); + } + + if((!$env->is_logged_in and !$settings->anonedits) or // if we aren't logged in and anonymous edits are disbled + !$settings->editing or// or editing is disabled + ( + isset($pageindex->$page) and // the page exists + isset($pageindex->$page->protect) and // the protect property exists + $pageindex->$page->protect and // the protect property is true + !$env->is_admin // the user isn't an admin + ) + ) + { + if(!$creatingpage) + { + // The page already exists - let the user view the page source + exit(page_renderer::render_main("Viewing source for $env->page", "

      $settings->sitename does not allow anonymous users to make edits. If you are in fact logged in, then this page is probably protected, and you aren't an administrator or moderator. You can view the source of $env->page below, but you can't edit it.

      ")); + } + else + { + http_response_code(404); + exit(page_renderer::render_main("404 - $env->page", "

      The page $env->page does not exist, but you do not have permission to create it.

      If you haven't already, perhaps you should try logging in.

      ")); + } + } + + $content = "

      $title

      "; + if(!$env->is_logged_in and $settings->anonedits) + { + $content .= "

      Warning: You are not logged in! Your IP address may be recorded.

      "; + } + $content .= "
      + +

      $settings->editing_message

      + +
      "; + exit(page_renderer::render_main("$title - $settings->sitename", $content)); + }); + + /* + * + * ___ __ ___ _____ + * / __|/ _` \ \ / / _ \ + * \__ \ (_| |\ V / __/ + * |___/\__,_| \_/ \___| + * %save% + */ + add_action("save", function() { + global $pageindex, $settings, $env, $save_preprocessors; + if(!$settings->editing) + { + header("location: index.php?page=$env->page"); + exit(page_renderer::render_main("Error saving edit", "

      Editing is currently disabled on this wiki.

      ")); + } + if(!$env->is_logged_in and !$settings->anonedits) + { + http_response_code(403); + header("refresh: 5; url=index.php?page=$env->page"); + exit("You are not logged in, so you are not allowed to save pages on $settings->sitename. Redirecting in 5 seconds...."); + } + $page = $env->page; + if(( + isset($pageindex->$page) and + isset($pageindex->page->protect) and + $pageindex->$page->protect + ) and !$env->is_admin) + { + http_response_code(403); + header("refresh: 5; url=index.php?page=$env->page"); + exit("$env->page is protected, and you aren't logged in as an administrastor or moderator. Your edit was not saved. Redirecting in 5 seconds..."); + } + if(!isset($_POST["content"])) + { + http_response_code(400); + header("refresh: 5; url=index.php?page=$env->page"); + exit("Bad request: No content specified."); + } + + // Make sure that the directory in which the page needs to be saved exists + if(!is_dir(dirname("$env->page.md"))) + { + // Recursively create the directory if needed + mkdir(dirname("$env->page.md"), null, true); + } + + + $pagedata = $_POST["content"]; + + if($settings->clean_raw_html) + $pagedata = htmlentities($pagedata, ENT_QUOTES); + + if(file_put_contents("$env->page.md", $pagedata) !== false) + { + $page = $env->page; + // Make sure that this page's parents exist + check_subpage_parents($page); + + // Update the page index + if(!isset($pageindex->$page)) + { + $pageindex->$page = new stdClass(); + $pageindex->$page->filename = "$env->page.md"; + } + $pageindex->$page->size = strlen($_POST["content"]); + $pageindex->$page->lastmodified = time(); + if($env->is_logged_in) + $pageindex->$page->lasteditor = utf8_encode($env->user); + else + $pageindex->$page->lasteditor = utf8_encode("anonymous"); + + // A hack to resave the pagedata if the preprocessors have + // changed it. We need this because the preprocessors *must* + // run _after_ the pageindex has been updated. + $pagedata_orig = $pagedata; + + // Execute all the preprocessors + foreach($save_preprocessors as $func) + { + $func($pageindex->$page, $pagedata); + } + + if($pagedata !== $pagedata_orig) + file_put_contents("$env->page.md", $pagedata); + + + file_put_contents("./pageindex.json", json_encode($pageindex, JSON_PRETTY_PRINT)); + + if(isset($_GET["newpage"])) + http_response_code(201); + else + http_response_code(200); + + header("location: index.php?page=$env->page&edit_status=success&redirect=no"); + exit(); + } + else + { + http_response_code(507); + exit(page_renderer::render_main("Error saving page - $settings->sitename", "

      $settings->sitename failed to write your changes to the disk. Your changes have not been saved, but you might be able to recover your edit by pressing the back button in your browser.

      +

      Please tell the administrator of this wiki (" . $settings->admindetails["name"] . ") about this problem.

      ")); + } + }); + } +]); - -register_module([ - "name" => "Default Parser", - "version" => "0.8", - "author" => "Johnny Broadway & Starbeamrainbowlabs", - "description" => "The default parser for Pepperminty Wiki. Based on Johnny Broadway's Slimdown (with more than a few modifications). This parser's features are documented in the help page.", - "id" => "parser-default", - "code" => function() { - add_parser("default", function($markdown) { - return Slimdown::render($markdown); - }); - } -]); - -//////////////////////////////////////////////////////////////////////////////////////////// -//////////////////////////////////////////////////////////////////////////////////////////// -///////////////////////////////////////// Slimdown ///////////////////////////////////////// -////////////////////////////////////////////////////////////////////////////// %slimdown% // -//////////////////////////////////////////////////////////////////////////////////////////// -/** - * Slimdown - A very basic regex-based Markdown parser. Supports the - * following elements (and can be extended via Slimdown::add_rule()): - * - * - Headers - * - Links - * - Bold - * - Emphasis - * - Deletions - * - Quotes - * - Inline code - * - Blockquotes - * - Ordered/unordered lists - * - Horizontal rules - * - * Author: Johnny Broadway - * Website: https://gist.github.com/jbroadway/2836900 - * License: MIT - */ - -/** - * Modified by Starbeamrainbowlabs (starbeamrainbowlabs) - * - * Changed bold to use single asterisks - * Changed italics to use single underscores - * Added one to add the heading levels (no

      tags allowed) - * Added wiki style internal link parsing - * Added wiki style internal link parsing with display text - * Added image support - */ -class Slimdown { - public static $rules = array ( - '/\r\n/' => "\n", // new line normalisation - '/^(#+)(.*)/' => 'self::header', // headers - '/(\*)(.*?)\1/' => '\2', // bold - '/(_)(.*?)\1/' => '\2', // emphasis - - '/!\[(.*)\]\(([^\s]+)\s(\d+.+)\s(left|right)\)/' => '\1', // images with size - '/!\[(.*)\]\(([^\s]+)\s(\d+.+)\)/' => '\1', // images with size - '/!\[(.*)\]\((.*)\)/' => '\1', // basic images - - '/\[\[([a-zA-Z0-9\_\- ]+)\|([a-zA-Z0-9\_\- ]+)\]\]/' => '\2', //internal links with display text - '/\[\[([a-zA-Z0-9\_\- ]+)\]\]/' => '\1', //internal links - '/\[([^\[]+)\]\(([^\)]+)\)/' => '\1', // links - '/\~\~(.*?)\~\~/' => '\1', // del - '/\:\"(.*?)\"\:/' => '\1', // quote - '/`(.*?)`/' => '\1', // inline code - '/\n\s*(\*|-)(.*)/' => 'self::ul_list', // ul lists - '/\n[0-9]+\.(.*)/' => 'self::ol_list', // ol lists - '/\n(>|\>)(.*)/' => 'self::blockquote', // blockquotes - '/\n-{3,}/' => "\n
      ", // horizontal rule - '/\n([^\n]+)\n\n/' => 'self::para', // add paragraphs - '/<\/ul>\s?
        /' => '', // fix extra ul - '/<\/ol>\s?
          /' => '', // fix extra ol - '/<\/blockquote>
          /' => "\n" // fix extra blockquote - ); - private static function para ($regs) { - $line = $regs[1]; - $trimmed = trim ($line); - if (preg_match ('/^<\/?(ul|ol|li|h|p|bl)/', $trimmed)) { - return "\n" . $line . "\n"; - } - return sprintf ("\n

          %s

          \n", $trimmed); - } - private static function ul_list ($regs) { - $item = $regs[2]; - return sprintf ("\n
            \n\t
          • %s
            • \n
          ", trim($item)); - } - private static function ol_list ($regs) { - $item = $regs[1]; - return sprintf ("\n
            \n\t
          1. %s
            2. \n
          ", trim($item)); - } - private static function blockquote ($regs) { - $item = $regs[2]; - return sprintf ("\n
          %s
          ", trim($item)); - } - private static function header ($regs) { - list ($tmp, $chars, $header) = $regs; - $level = strlen ($chars); - return sprintf ('%s', $level + 1, trim($header), $level + 1); - } - - /** - * Add a rule. - */ - public static function add_rule ($regex, $replacement) { - self::$rules[$regex] = $replacement; - } - /** - * Render some Markdown into HTML. - */ - public static function render ($text) { - foreach (self::$rules as $regex => $replacement) { - if (is_callable ( $replacement)) { - $text = preg_replace_callback ($regex, $replacement, $text); - } else { - $text = preg_replace ($regex, $replacement, $text); - } - } - return trim ($text); - } -} -//////////////////////////////////////////////////////////////////////////////////////////// -//////////////////////////////////////////////////////////////////////////////////////////// - - -// %next_module% // - - -// Execute each module's code -foreach($modules as $moduledata) -{ - $moduledata["code"](); -} -// Make sure that the credits page exists -if(!isset($actions->credits)) -{ - exit(page_renderer::render_main("Error - $settings->$sitename", "

          No credits page detected. The credits page is a required module!

          ")); -} - -// Perform the appropriate action -$action_name = $env->action; -if(isset($actions->$action_name)) -{ - $req_action_data = $actions->$action_name; - $req_action_data(); -} -else -{ - exit(page_renderer::render_main("Error - $settings->sitename", "

          No action called " . strtolower($_GET["action"]) ." has been registered. Perhaps you are missing a module?

          ")); -} - -?> + + +register_module([ + "name" => "Export", + "version" => "0.2", + "author" => "Starbeamrainbowlabs", + "description" => "Adds a page that you can use to export your wiki as a .zip file. Uses \$settings->export_only_allow_admins, which controls whether only admins are allowed to export the wiki.", + "id" => "page-export", + "code" => function() { + add_action("export", function() { + global $settings, $pageindex, $env; + + if($settings->export_allow_only_admins && !$env->is_admin) + { + http_response_code(401); + exit(page_renderer::render("Export error - $settings->sitename", "Only administrators of $settings->sitename are allowed to export the wiki as a zip. Return to the $settings->defaultpage.")); + } + + $tmpfilename = tempnam(sys_get_temp_dir(), "pepperminty-wiki-"); + + $zip = new ZipArchive(); + + if($zip->open($tmpfilename, ZipArchive::CREATE) !== true) + { + http_response_code(507); + exit(page_renderer::render("Export error - $settings->sitename", "Pepperminty Wiki was unable to open a temporary file to store the exported data in. Please contact $settings->sitename's administrator (" . $settings->admindetails["name"] . " at " . hide_email($settings->admindetails["email"]) . ") for assistance.")); + } + + foreach($pageindex as $entry) + { + $zip->addFile("./$entry->filename", $entry->filename); + } + + if($zip->close() !== true) + { + http_response_code(500); + exit(page_renderer::render("Export error - $settings->sitename", "Pepperminty wiki was unable to close the temporary zip file after creating it. Please contact $settings->sitename's administrator (" . $settings->admindetails["name"] . " at " . hide_email($settings->admindetails["email"]) . ") for assistance.")); + } + + header("content-type: application/zip"); + header("content-disposition: attachment; filename=$settings->sitename-export.zip"); + header("content-length: " . filesize($tmpfilename)); + + $zip_handle = fopen($tmpfilename, "rb"); + fpassthru($zip_handle); + fclose($zip_handle); + unlink($tmpfilename); + }); + } +]); + + + + +register_module([ + "name" => "Help page", + "version" => "0.6", + "author" => "Starbeamrainbowlabs", + "description" => "Adds the help action. You really want this one.", + "id" => "page-help", + "code" => function() { + add_action("help", function() { + global $settings, $version; + + $title = "Help - $settings->sitename"; + $content = "

          $settings->sitename Help

          +

          Welcome to $settings->sitename!

          +

          $settings->sitename is powered by Pepperminty wiki, a complete wiki in a box you can drop into your server.

          +

          Navigating

          +

          All the navigation links can be found in the top right corner, along with a box in which you can type a page name and hit enter to be taken to that page (if your site administrator has enabled it).

          +

          In order to edit pages on $settings->sitename, you probably need to be logged in. If you do not already have an account you will need to ask $settings->sitename's administrator for an account since there is not registration form. Note that the $settings->sitename's administrator may have changed these settings to allow anonymous edits.

          +

          Editing

          +

          $settings->sitename's editor uses a modified version of slimdown, a flavour of markdown that is implementated using regular expressions. See the credits page for more information and links to the original source for this. A quick reference can be found below:

          + + + + + + + + + + + + + + + + + +
          Type ThisTo get this
          _italics_italics
          *bold*bold
          ~~Strikethrough~~Strikethough
          `code`code
          # Heading

          Heading

          ## Sub Heading

          Sub Heading

          [[Internal Link]]Internal Link
          [[Display Text|Internal Link]]Display Text
          [Display text](//google.com/)Display Text
          > Blockquote
          > Some text
          Blockquote
          Some text
          - Apples
          * Oranges
          • Apples
          • Oranges
          1. This is
          2. an ordered list
          1. This is
          2. an ordered list
          + --- +
          ![Alt text](//starbeamrainbowlabs.com/favicon-small.png)Alt text
          + +

          In addition, the following extra syntax is supported for images:

          + + 
          Size the image to at most 250 pixels wide:
+![Alt text](//starbeamrainbowlabs.com/favicon-small.png 250px)
+
+Size the image to at most 120px wide and have it float at the right ahnd size of the page:
+![Alt text](//starbeamrainbowlabs.com/favicon-small.png 120px right)
          + +

          Administrator Actions

          +

          By default, the delete and move actions are shown on the nav bar. These can be used by administrators to delete or move pages.

          +

          The other thing admininistrators can do is update the wiki (provided they know the site's secret). This page can be found here: Update $settings->sitename.

          +

          $settings->sitename is currently running on Pepperminty Wiki $version

          "; + exit(page_renderer::render_main($title, $content)); + }); + } +]); + + + + +register_module([ + "name" => "Page list", + "version" => "0.6", + "author" => "Starbeamrainbowlabs", + "description" => "Adds a page that lists all the pages in the index along with their metadata.", + "id" => "page-list", + "code" => function() { + add_action("list", function() { + global $pageindex, $settings; + + $sorted_pageindex = get_object_vars($pageindex); + ksort($sorted_pageindex, SORT_NATURAL); + $title = "All Pages"; + $content = "

          $title on $settings->sitename

          + + + + + + + \n"; + foreach($sorted_pageindex as $pagename => $pagedetails) + { + $content .= "\t\t + + + + + + \n"; + } + $content .= "
          Page NameSizeLast EditorLast Edit Time
          $pagename" . human_filesize($pagedetails->size) . "$pagedetails->lasteditor" . human_time_since($pagedetails->lastmodified) . " (" . date("l jS \of F Y \a\\t h:ia T", $pagedetails->lastmodified) . ")
          "; + exit(page_renderer::render_main("$title - $settings->sitename", $content)); + }); + } +]); + + + + +register_module([ + "name" => "Login", + "version" => "0.7", + "author" => "Starbeamrainbowlabs", + "description" => "Adds a pair of actions (login and checklogin) that allow users to login. You need this one if you want your users to be able to login.", + "id" => "page-login", + "code" => function() { + /* + * _ _ + * | | ___ __ _(_)_ __ + * | |/ _ \ / _` | | '_ \ + * | | (_) | (_| | | | | | + * |_|\___/ \__, |_|_| |_| + * |___/ %login% + */ + add_action("login", function() { + global $settings; + $title = "Login to $settings->sitename"; + $content = "

          Login to $settings->sitename

          \n"; + if(isset($_GET["failed"])) + $content .= "\t\t

          Login failed.

          \n"; + $content .= "\t\t
          + + +
          + + +
          + +
          "; + exit(page_renderer::render_main($title, $content)); + }); + + /* + * _ _ _ _ + * ___| |__ ___ ___| | _| | ___ __ _(_)_ __ + * / __| '_ \ / _ \/ __| |/ / |/ _ \ / _` | | '_ \ + * | (__| | | | __/ (__| <| | (_) | (_| | | | | | + * \___|_| |_|\___|\___|_|\_\_|\___/ \__, |_|_| |_| + * %checklogin% |___/ + */ + add_action("checklogin", function() { + global $settings, $env; + + //actually do the login + if(isset($_POST["user"]) and isset($_POST["pass"])) + { + //the user wants to log in + $user = $_POST["user"]; + $pass = $_POST["pass"]; + if($settings->users[$user] == hash_password($pass)) + { + $env->is_logged_in = true; + $expiretime = time() + 60*60*24*30; //30 days from now + $_SESSION["$settings->sessionprefix-user"] = $user; + $_SESSION["$settings->sessionprefix-pass"] = hash_password($pass); + $_SESSION["$settings->sessionprefix-expiretime"] = $expiretime; + //redirect to wherever the user was going + http_response_code(302); + if(isset($_POST["goto"])) + header("location: " . $_POST["returnto"]); + else + header("location: index.php"); + exit(); + } + else + { + http_response_code(302); + header("location: index.php?action=login&failed=yes"); + exit(); + } + } + else + { + http_response_code(302); + header("location: index.php?action=login&failed=yes&badrequest=yes"); + exit(); + } + }); + } +]); + +/* + * @summary Hashes the given password according to the current settings defined + * in $settings. + * + * @param $pass {string} The password to hash. + * + * @returns {string} The hashed password. Uses sha3 if $settings->use_sha3 is + * enabled, or sha256 otherwise. + */ +function hash_password($pass) +{ + global $settings; + if($settings->use_sha3) + { + return sha3($pass, 256); + } + else + { + return hash("sha256", $pass); + } +} + + + + +register_module([ + "name" => "Logout", + "version" => "0.6", + "author" => "Starbeamrainbowlabs", + "description" => "Adds an action to let users user out. For security reasons it is wise to add this module since logging in automatically opens a session that is valid for 30 days.", + "id" => "page-logout", + "code" => function() { + add_action("logout", function() { + global $env; + $env->is_logged_in = false; + unset($env->user); + unset($env->pass); + //clear the session variables + $_SESSION = []; + session_destroy(); + + exit(page_renderer::render_main("Logout Successful", "

          Logout Successful

          +

          Logout Successful. You can login again here.

          ")); + }); + } +]); + + + + +register_module([ + "name" => "Page mover", + "version" => "0.6", + "author" => "Starbeamrainbowlabs", + "description" => "Adds an action to allow administrators to move pages.", + "id" => "page-move", + "code" => function() { + add_action("move", function() { + global $pageindex, $settings, $env; + if(!$settings->editing) + { + exit(page_renderer::render_main("Moving $env->page - error", "

          You tried to move $env->page, but editing is disabled on this wiki.

          +

          If you wish to move this page, please re-enable editing on this wiki first.

          +

          Go back to $env->page.

          +

          Nothing has been changed.

          ")); + } + if(!$env->is_admin) + { + exit(page_renderer::render_main("Moving $env->page - Error", "

          You tried to move $env->page, but you do not have permission to do that.

          +

          You should try logging in as an admin.

          ")); + } + + if(!isset($_GET["new_name"]) or strlen($_GET["new_name"]) == 0) + exit(page_renderer::render_main("Moving $env->page", "

          Moving $env->page

          +
          + + + +
          + + +
          + +
          ")); + + $new_name = makepathsafe($_GET["new_name"]); + + $page = $env->page; + if(!isset($pageindex->$page)) + exit(page_renderer::render_main("Moving $env->page - Error", "

          You tried to move $env->page to $new_name, but the page with the name $env->page does not exist in the first place.

          +

          Nothing has been changed.

          ")); + + if($env->page == $new_name) + exit(page_renderer::render_main("Moving $env->page - Error", "

          You tried to move $page, but the new name you gave is the same as it's current name.

          +

          It is possible that you tried to use some characters in the new name that are not allowed and were removed.

          +

          Page names may only contain alphanumeric characters, dashes, and underscores.

          ")); + + //move the page in the page index + $pageindex->$new_name = new stdClass(); + foreach($pageindex->$page as $key => $value) + { + $pageindex->$new_name->$key = $value; + } + unset($pageindex->$page); + file_put_contents("./pageindex.json", json_encode($pageindex, JSON_PRETTY_PRINT)); + + //move the page on the disk + rename("$env->page.md", "$new_name.md"); + + exit(page_renderer::render_main("Moving $env->page", "

          $env->page has been moved to $new_name successfully.

          ")); + }); + } +]); + + + + +register_module([ + "name" => "Update", + "version" => "0.6.1", + "author" => "Starbeamrainbowlabs", + "description" => "Adds an update page that downloads the latest stable version of Pepperminty Wiki. This module is currently outdated as it doesn't save your module preferences.", + "id" => "page-update", + "code" => function() { + add_action("update", function() { + global $settings, $env; + + if(!$env->is_admin) + { + http_response_code(401); + exit(page_renderer::render_main("Update - Error", "

          You must be an administrator to do that.

          ")); + } + + if(!isset($_GET["do"]) or $_GET["do"] !== "true") + { + exit(page_renderer::render_main("Update $settings->sitename", "

          This page allows you to update $settings->sitename.

          +

          Currently, $settings->sitename is using $settings->version of Pepperminty Wiki.

          +

          This script will automatically download and install the latest version of Pepperminty Wiki from the url of your choice (see settings), regardless of whether an update is actually needed (version checking isn't implemented yet).

          +

          To update $settings->sitename, fill out the form below and click click the update button.

          +

          Note that a backup system has not been implemented yet! If this script fails you will loose your wiki's code and have to re-build it.

          +
          + + + + + +
          ")); + } + + if(!isset($_GET["secret"]) or $_GET["secret"] !== $settings->sitesecret) + { + exit(page_renderer::render_main("Update $settings->sitename - Error", "

          You forgot to enter $settings->sitename's secret code or entered it incorrectly. $settings->sitename's secret can be found in the settings portion of index.php.

          ")); + } + + $settings_separator = "/////////////// Do not edit below this line unless you know what you are doing! ///////////////"; + + $log = "Beginning update...\n"; + + $log .= "I am " . __FILE__ . ".\n"; + $oldcode = file_get_contents(__FILE__); + $log .= "Fetching new code..."; + $newcode = file_get_contents($settings->updateurl); + $log .= "done.\n"; + + $log .= "Rewriting " . __FILE__ . "..."; + $settings = substr($oldcode, 0, strpos($oldcode, $settings_separator)); + $code = substr($newcode, strpos($newcode, $settings_separator)); + $result = $settings . $code; + $log .= "done.\n"; + + $log .= "Saving..."; + file_put_contents(__FILE__, $result); + $log .= "done.\n"; + + $log .= "Update complete. I am now running on the latest version of Pepperminty Wiki."; + $log .= "The version number that I have updated to can be found on the credits or help ages."; + + exit(page_renderer::render_main("Update - Success", "
          • " . implode("
          • ", explode("\n", $log)) . "
          ")); + }); + } +]); + + + +register_module([ + "name" => "Page viewer", + "version" => "0.11", + "author" => "Starbeamrainbowlabs", + "description" => "Allows you to view pages. You reallyshould include this one.", + "id" => "page-view", + "code" => function() { + add_action("view", function() { + global $pageindex, $settings, $env; + + // Check to make sure that the page exists + $page = $env->page; + if(!isset($pageindex->$page)) + { + // todo make this intelligent so we only redirect if the user is acutally able to create the page + if($settings->editing) + { + // Editing is enabled, redirect to the editing page + http_response_code(307); // Temporary redirect + header("location: index.php?action=edit&newpage=yes&page=" . rawurlencode($env->page)); + exit(); + } + else + { + // Editing is disabled, show an error message + http_response_code(404); + exit(page_renderer::render_main("$env->page - 404 - $settings->sitename", "

          $env->page does not exist.

          Since editing is currently disabled on this wiki, you may not create this page. If you feel that this page should exist, try contacting this wiki's Administrator.

          ")); + } + } + + // Perform a redirect if the requested page is a redirect page + if(isset($pageindex->$page->redirect) && + $pageindex->$page->redirect === true) + { + $send_redirect = true; + if(isset($_GET["redirect"]) && $_GET["redirect"] == "no") + $send_redirect = false; + + if($send_redirect) + { + // Todo send an explanatory page along with the redirect + http_response_code(307); + header("location: ?action=$env->action&page=" . $pageindex->$page->redirect_target . "&redirected_from=$env->page"); + exit(); + } + } + + $title = "$env->page - $settings->sitename"; + if(isset($pageindex->$page->protect) && $pageindex->$page->protect === true) + $title = $settings->protectedpagechar . $title; + $content = "

          $env->page

          \n"; + + // Add an extra message if the requested was redirected from another page + if(isset($_GET["redirected_from"])) + $content .= "

          Redirected from " . $_GET["redirected_from"] . ".

          "; + + $parsing_start = microtime(true); + + $content .= parse_page_source(file_get_contents("$env->page.md")); + + if($settings->show_subpages) + { + $subpages = get_object_vars(get_subpages($pageindex, $env->page)); + + if(count($subpages) > 0) + { + $content .= "
          "; + $content .= "Subpages: "; + foreach($subpages as $subpage => $times_removed) + { + if($times_removed <= $settings->subpages_display_depth) + { + $content .= "$subpage, "; + } + } + // Remove the last comma from the content + $content = substr($content, 0, -2); + } + } + + $content .= "\n\t\t\n"; + + if(isset($_GET["printable"]) and $_GET["printable"] === "yes") + exit(page_renderer::render_minimal($title, $content)); + else + exit(page_renderer::render_main($title, $content)); + }); + } +]); + + + + +register_module([ + "name" => "Default Parser", + "version" => "0.8", + "author" => "Johnny Broadway & Starbeamrainbowlabs", + "description" => "The default parser for Pepperminty Wiki. Based on Johnny Broadway's Slimdown (with more than a few modifications). This parser's features are documented in the help page.", + "id" => "parser-default", + "code" => function() { + add_parser("default", function($markdown) { + return Slimdown::render($markdown); + }); + } +]); + +//////////////////////////////////////////////////////////////////////////////////////////// +//////////////////////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////// Slimdown ///////////////////////////////////////// +////////////////////////////////////////////////////////////////////////////// %slimdown% // +//////////////////////////////////////////////////////////////////////////////////////////// +/** + * Slimdown - A very basic regex-based Markdown parser. Supports the + * following elements (and can be extended via Slimdown::add_rule()): + * + * - Headers + * - Links + * - Bold + * - Emphasis + * - Deletions + * - Quotes + * - Inline code + * - Blockquotes + * - Ordered/unordered lists + * - Horizontal rules + * + * Author: Johnny Broadway + * Website: https://gist.github.com/jbroadway/2836900 + * License: MIT + */ + +/** + * Modified by Starbeamrainbowlabs (starbeamrainbowlabs) + * + * Changed bold to use single asterisks + * Changed italics to use single underscores + * Added one to add the heading levels (no

          tags allowed) + * Added wiki style internal link parsing + * Added wiki style internal link parsing with display text + * Added image support + */ +class Slimdown { + public static $rules = array ( + '/\r\n/' => "\n", // new line normalisation + '/^(#+)(.*)/' => 'self::header', // headers + '/(\*)(.*?)\1/' => '\2', // bold + '/(_)(.*?)\1/' => '\2', // emphasis + + '/!\[(.*)\]\(([^\s]+)\s(\d+.+)\s(left|right)\)/' => '\1', // images with size + '/!\[(.*)\]\(([^\s]+)\s(\d+.+)\)/' => '\1', // images with size + '/!\[(.*)\]\((.*)\)/' => '\1', // basic images + + '/\[\[([a-zA-Z0-9\_\- ]+)\|([a-zA-Z0-9\_\- ]+)\]\]/' => '\2', //internal links with display text + '/\[\[([a-zA-Z0-9\_\- ]+)\]\]/' => '\1', //internal links + '/\[([^\[]+)\]\(([^\)]+)\)/' => '\1', // links + '/\~\~(.*?)\~\~/' => '\1', // del + '/\:\"(.*?)\"\:/' => '\1', // quote + '/`(.*?)`/' => '\1', // inline code + '/\n\s*(\*|-)(.*)/' => 'self::ul_list', // ul lists + '/\n[0-9]+\.(.*)/' => 'self::ol_list', // ol lists + '/\n(>|\>)(.*)/' => 'self::blockquote', // blockquotes + '/\n-{3,}/' => "\n
          ", // horizontal rule + '/\n([^\n]+)\n\n/' => 'self::para', // add paragraphs + '/<\/ul>\s?
            /' => '', // fix extra ul + '/<\/ol>\s?
              /' => '', // fix extra ol + '/<\/blockquote>
              /' => "\n" // fix extra blockquote + ); + private static function para ($regs) { + $line = $regs[1]; + $trimmed = trim ($line); + if (preg_match ('/^<\/?(ul|ol|li|h|p|bl)/', $trimmed)) { + return "\n" . $line . "\n"; + } + return sprintf ("\n

              %s

              \n", $trimmed); + } + private static function ul_list ($regs) { + $item = $regs[2]; + return sprintf ("\n
                \n\t
              • %s
                • \n
              ", trim($item)); + } + private static function ol_list ($regs) { + $item = $regs[1]; + return sprintf ("\n
                \n\t
              1. %s
                2. \n
              ", trim($item)); + } + private static function blockquote ($regs) { + $item = $regs[2]; + return sprintf ("\n
              %s
              ", trim($item)); + } + private static function header ($regs) { + list ($tmp, $chars, $header) = $regs; + $level = strlen ($chars); + return sprintf ('%s', $level + 1, trim($header), $level + 1); + } + + /** + * Add a rule. + */ + public static function add_rule ($regex, $replacement) { + self::$rules[$regex] = $replacement; + } + /** + * Render some Markdown into HTML. + */ + public static function render ($text) { + foreach (self::$rules as $regex => $replacement) { + if (is_callable ( $replacement)) { + $text = preg_replace_callback ($regex, $replacement, $text); + } else { + $text = preg_replace ($regex, $replacement, $text); + } + } + return trim ($text); + } +} +//////////////////////////////////////////////////////////////////////////////////////////// +//////////////////////////////////////////////////////////////////////////////////////////// + + + +// %next_module% // + + +// Execute each module's code +foreach($modules as $moduledata) +{ + $moduledata["code"](); +} +// Make sure that the credits page exists +if(!isset($actions->credits)) +{ + exit(page_renderer::render_main("Error - $settings->$sitename", "

              No credits page detected. The credits page is a required module!

              ")); +} + +// Perform the appropriate action +$action_name = $env->action; +if(isset($actions->$action_name)) +{ + $req_action_data = $actions->$action_name; + $req_action_data(); +} +else +{ + exit(page_renderer::render_main("Error - $settings->sitename", "

              No action called " . strtolower($_GET["action"]) ." has been registered. Perhaps you are missing a module?

              ")); +} + +?> diff --git a/module_index.json b/module_index.json index 789ead3..a8b4952 100644 --- a/module_index.json +++ b/module_index.json @@ -5,7 +5,7 @@ "author": "Starbeamrainbowlabs", "description": "Adds a utility action (that anyone can use) called hash that hashes a given string. Useful when changing a user's password.", "id": "action-hash", - "lastupdate": 1432497591, + "lastupdate": 1444478036, "optional": false }, { @@ -100,11 +100,11 @@ }, { "name": "Login", - "version": "0.6", + "version": "0.7", "author": "Starbeamrainbowlabs", "description": "Adds a pair of actions (login and checklogin) that allow users to login. You need this one if you want your users to be able to login.", "id": "page-login", - "lastupdate": 1442928221, + "lastupdate": 1444477827, "optional": false }, { diff --git a/modules/action-hash.php b/modules/action-hash.php index ea95e19..4a8127b 100644 --- a/modules/action-hash.php +++ b/modules/action-hash.php @@ -7,6 +7,8 @@ register_module([ "id" => "action-hash", "code" => function() { add_action("hash", function() { + global $settings; + if(!isset($_GET["string"])) { http_response_code(422); @@ -15,7 +17,7 @@ register_module([ } else { - exit(page_renderer::render_main("Hashed string", "

              " . $_GET["string"] . " → " . hash("sha256", $_GET["string"]) . "

              ")); + exit(page_renderer::render_main("Hashed string", "

              Algorithm: " . ($settings->use_sha3 ? "sha3" : "sha256") . "

              \n

              " . $_GET["string"] . " → " . hash_password($_GET["string"]) . "

              ")); } }); } diff --git a/modules/page-login.php b/modules/page-login.php index a1631a8..745dd8e 100644 --- a/modules/page-login.php +++ b/modules/page-login.php @@ -1,7 +1,7 @@ "Login", - "version" => "0.6", + "version" => "0.7", "author" => "Starbeamrainbowlabs", "description" => "Adds a pair of actions (login and checklogin) that allow users to login. You need this one if you want your users to be able to login.", "id" => "page-login", @@ -49,12 +49,12 @@ register_module([ //the user wants to log in $user = $_POST["user"]; $pass = $_POST["pass"]; - if($settings->users[$user] == hash("sha256", $pass)) + if($settings->users[$user] == hash_password($pass)) { $env->is_logged_in = true; $expiretime = time() + 60*60*24*30; //30 days from now $_SESSION["$settings->sessionprefix-user"] = $user; - $_SESSION["$settings->sessionprefix-pass"] = hash("sha256", $pass); + $_SESSION["$settings->sessionprefix-pass"] = hash_password($pass); $_SESSION["$settings->sessionprefix-expiretime"] = $expiretime; //redirect to wherever the user was going http_response_code(302); @@ -80,4 +80,27 @@ register_module([ }); } ]); + +/* + * @summary Hashes the given password according to the current settings defined + * in $settings. + * + * @param $pass {string} The password to hash. + * + * @returns {string} The hashed password. Uses sha3 if $settings->use_sha3 is + * enabled, or sha256 otherwise. + */ +function hash_password($pass) +{ + global $settings; + if($settings->use_sha3) + { + return sha3($pass, 256); + } + else + { + return hash("sha256", $pass); + } +} + ?> diff --git a/settings.fragment.php b/settings.fragment.php index 3a2f08c..0ca2085 100644 --- a/settings.fragment.php +++ b/settings.fragment.php @@ -90,6 +90,11 @@ $settings->users = [ "user" => "873ac9ffea4dd04fa719e8920cd6938f0c23cd678af330939cff53c3d2855f34" //cheese ]; +// Whether to use the new sha3 hashing algorithm that was standardised on the +// 8th August 2015. Only works if you have strawbrary's sha3 extension +// installed. Get it here: https://github.com/strawbrary/php-sha3 +$settings->use_sha3 = false; + // An array of usernames that are administrators. Administrators can delete and // move pages. $settings->admins = [ "admin" ]; diff --git a/start-server.sh b/start-server.sh index e1c55d3..e885eb5 100644 --- a/start-server.sh +++ b/start-server.sh @@ -1,4 +1,4 @@ #!/usr/bin/env bash php -S [::]:35623 -t build & -sensible-browser [::]:35623 \ No newline at end of file +sensible-browser [::]:35623