Subversion Repositories Applications.wikini

<?php
/* encoding: iso-8859-1
wakka.php
Copyright (c) 2002, Hendrik Mans <hendrik@mans.de>
Copyright  2003 Carlo Zottmann
Copyright 2002, 2003 David DELON
Copyright 2002, 2003, 2004 Charles NÉPOTE
Copyright 2002, 2003 Patrick PAUL
Copyright 2003 Éric DELORD
Copyright 2003 Éric FELDSTEIN
Copyright 2004 Jean-Christophe ANDRÉ
All rights reserved.
Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions
are met:
1. Redistributions of source code must retain the above copyright
notice, this list of conditions and the following disclaimer.
2. Redistributions in binary form must reproduce the above copyright
notice, this list of conditions and the following disclaimer in the
documentation and/or other materials provided with the distribution.
3. The name of the author may not be used to endorse or promote products
derived from this software without specific prior written permission.

THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
*/

/*
    Yes, most of the formatting used in this file is HORRIBLY BAD STYLE. However,
    most of the action happens outside of this file, and I really wanted the code
    to look as small as what it does. Basically. Oh, I just suck. :)
*/



// do not change this line, you fool. In fact, don't change anything! Ever!
define("WAKKA_VERSION", "0.1.1");
define("WIKINI_VERSION", "0.4.3");
// start the compute time
list($g_usec, $g_sec) = explode(" ",microtime());
define ("t_start", (float)$g_usec + (float)$g_sec);
$t_SQL=0;



class Wiki
{
        var $dblink;
        var $page;
        var $tag;
        var $parameter = array();
        var $queryLog = array();
        var $interWiki = array();
        var $VERSION;
        var $CookiePath = '/';


        // constructor
        function Wiki($config)
        {
                $this->config = $config;
                // some host do not allow mysql_pconnect
                $this->dblink = @mysql_connect (
                        $this->config["mysql_host"],
                        $this->config["mysql_user"],
                        $this->config["mysql_password"]);
                if ($this->dblink)
                {
                        if (!@mysql_select_db($this->config["mysql_database"], $this->dblink))
                        {
                                @mysql_close($this->dblink);
                                $this->dblink = false;
                        }
                }
                $this->VERSION = WAKKA_VERSION;

                //determine le chemin pour le cookie
                $a = parse_url($this->GetConfigValue('base_url'));
                $this->CookiePath = dirname($a['path']);
                if ($this->CookiePath != '/') $this->CookiePath .= '/';
        }



        // DATABASE
        function Query($query)
        {
                if($this->GetConfigValue("debug")) $start = $this->GetMicroTime();
                if (!$result = mysql_query($query, $this->dblink))
                {
                        ob_end_clean();
                        die("Query failed: ".$query." (".mysql_error().")");
                }
                if($this->GetConfigValue("debug"))
                {
                        $time = $this->GetMicroTime() - $start;
                        $this->queryLog[] = array(
                                "query"         => $query,
                                "time"          => $time);
                }
                return $result;
        }
        function LoadSingle($query) { if ($data = $this->LoadAll($query)) return $data[0]; }
        function LoadAll($query)
        {
        $data=array();
        if ($r = $this->Query($query))
                {
                        while ($row = mysql_fetch_assoc($r)) $data[] = $row;
                        mysql_free_result($r);
                }
                return $data;
        }



        // MISC
        function GetMicroTime() { list($usec, $sec) = explode(" ",microtime()); return ((float)$usec + (float)$sec); }
        function IncludeBuffered($filename, $notfoundText = "", $vars = "", $path = "")
        {
                if ($path) $dirs = explode(":", $path);
                else $dirs = array("");

                foreach($dirs as $dir)
                {
                        if ($dir) $dir .= "/";
                        $fullfilename = $dir.$filename;
                        if (file_exists($fullfilename))
                        {
                                if (is_array($vars)) extract($vars);

                                ob_start();
                                include($fullfilename);
                                $output = ob_get_contents();
                                ob_end_clean();
                                return $output;
                        }
                }
                if ($notfoundText) return $notfoundText;
                else return false;
        }



        // VARIABLES
        function GetPageTag() { return $this->tag; }
        function GetPageTime() { return $this->page["time"]; }
        function GetMethod() { return $this->method; }
        function GetConfigValue($name) { return $this->config[$name]; }
        function GetWakkaName() { return $this->GetConfigValue("wakka_name"); }
        function GetWakkaVersion() { return $this->VERSION; }
        function GetWikiNiVersion() { return WIKINI_VERSION; } 



        // PAGES
        function LoadPage($tag, $time = "", $cache = 1) {
                // retrieve from cache
                if (!$time && $cache && ($cachedPage = $this->GetCachedPage($tag))) { $page = $cachedPage;}
                // load page
                if (!isset($page)) $page = $this->LoadSingle("select * from ".$this->config["table_prefix"]."pages where tag = '".mysql_escape_string($tag)."' ".($time ? "and time = '".mysql_escape_string($time)."'" : "and latest = 'Y'")." limit 1");
                // cache result
                if (!$time) $this->CachePage($page);
                return $page;
        }
        function GetCachedPage($tag) {return (isset($this->pageCache[$tag]) ? $this->pageCache[$tag] : ''); }
        function CachePage($page) { $this->pageCache[$page["tag"]] = $page; }
        function SetPage($page) { $this->page = $page; if ($this->page["tag"]) $this->tag = $this->page["tag"]; }
        function LoadPageById($id) { return $this->LoadSingle("select * from ".$this->config["table_prefix"]."pages where id = '".mysql_escape_string($id)."' limit 1"); }
        function LoadRevisions($page) { return $this->LoadAll("select * from ".$this->config["table_prefix"]."pages where tag = '".mysql_escape_string($page)."' order by time desc"); }
        function LoadPagesLinkingTo($tag) { return $this->LoadAll("select from_tag as tag from ".$this->config["table_prefix"]."links where to_tag = '".mysql_escape_string($tag)."' order by tag"); }
        function LoadRecentlyChanged($limit=50) {
                $limit= (int) $limit;
                if ($pages = $this->LoadAll("select tag, time, user, owner from ".$this->config["table_prefix"]."pages where latest = 'Y' and comment_on = '' order by time desc limit $limit"))
                {
                        foreach ($pages as $page)
                        {
                                $this->CachePage($page);
                        }
                        return $pages;
                }
        }
        function LoadAllPages() { return $this->LoadAll("select * from ".$this->config["table_prefix"]."pages where latest = 'Y' order by tag"); }
        function FullTextSearch($phrase) { return $this->LoadAll("select * from ".$this->config["table_prefix"]."pages where latest = 'Y' and match(tag, body) against('".mysql_escape_string($phrase)."')"); }
        function LoadWantedPages() { return $this->LoadAll("select distinct ".$this->config["table_prefix"]."links.to_tag as tag,count(".$this->config["table_prefix"]."links.from_tag) as count from ".$this->config["table_prefix"]."links left join ".$this->config["table_prefix"]."pages on ".$this->config["table_prefix"]."links.to_tag = ".$this->config["table_prefix"]."pages.tag where ".$this->config["table_prefix"]."pages.tag is NULL group by tag order by count desc"); }
        function LoadOrphanedPages() { return $this->LoadAll("select distinct tag from ".$this->config["table_prefix"]."pages left join ".$this->config["table_prefix"]."links on ".$this->config["table_prefix"]."pages.tag = ".$this->config["table_prefix"]."links.to_tag where ".$this->config["table_prefix"]."links.to_tag is NULL and ".$this->config["table_prefix"]."pages.comment_on = '' order by tag"); }
        function IsOrphanedPage($tag) { return $this->LoadAll("select distinct tag from ".$this->config["table_prefix"]."pages left join ".$this->config["table_prefix"]."links on ".$this->config["table_prefix"]."pages.tag = ".$this->config["table_prefix"]."links.to_tag where ".$this->config["table_prefix"]."links.to_tag is NULL and ".$this->config["table_prefix"]."pages.comment_on ='' and tag='".mysql_escape_string($tag)."'"); }
        function DeleteOrphanedPage($tag) {
                $this->Query("delete from ".$this->config["table_prefix"]."pages where tag='".mysql_escape_string($tag)."' ");
                $this->Query("delete from ".$this->config["table_prefix"]."links where from_tag='".mysql_escape_string($tag)."' ");
                $this->Query("delete from ".$this->config["table_prefix"]."acls where page_tag='".mysql_escape_string($tag)."' ");
                $this->Query("delete from ".$this->config["table_prefix"]."referrers where page_tag='".mysql_escape_string($tag)."' ");
        }
        function SavePage($tag, $body, $comment_on = "") {
                // get current user
                $user = $this->GetUserName();

                //die($tag);

                // TODO: check write privilege
                if ($this->HasAccess("write", $tag))
                {
                        // is page new?
                        if (!$oldPage = $this->LoadPage($tag))
                        {
                                // create default write acl. store empty write ACL for comments.
                                $this->SaveAcl($tag, "write", ($comment_on ? "" : $this->GetConfigValue("default_write_acl")));

                                // create default read acl
                                $this->SaveAcl($tag, "read", $this->GetConfigValue("default_read_acl"));

                                // create default comment acl.
                                $this->SaveAcl($tag, "comment", $this->GetConfigValue("default_comment_acl"));

                                // current user is owner; if user is logged in! otherwise, no owner.
                                if ($this->GetUser()) $owner = $user;
                        }
                        else
                        {
                                // aha! page isn't new. keep owner!
                                $owner = $oldPage["owner"];
                        }


                        // set all other revisions to old
                        $this->Query("update ".$this->config["table_prefix"]."pages set latest = 'N' where tag = '".mysql_Escape_string($tag)."'");

                        // add new revision
                        $this->Query("insert into ".$this->config["table_prefix"]."pages set ".
                                "tag = '".mysql_escape_string($tag)."', ".
                                ($comment_on ? "comment_on = '".mysql_escape_string($comment_on)."', " : "").
                                "time = now(), ".
                                "owner = '".mysql_escape_string($owner)."', ".
                                "user = '".mysql_escape_string($user)."', ".
                                "latest = 'Y', ".
                                "body = '".mysql_escape_string(chop($body))."'");
                }
        }
        function PurgePages() {
                if ($days = $this->GetConfigValue("pages_purge_time")) {
                        // Selection of pages which can be deleted 
                        $pages = $this->LoadAll("select distinct tag, time from ".$this->config["table_prefix"]."pages where time < date_sub(now(), interval '".mysql_escape_string($days)."' day) and latest = 'N' order by time asc");
                        foreach ($pages as $page) {
                                // Deletion if there are more than 2 versions avalaible (TODO : parameter ?)
                                $tags=$this->LoadAll("select distinct tag from ".$this->config["table_prefix"]."pages where tag = '".mysql_escape_string($page[tag])."' group by tag having count(*) > 2 order by tag");
                                foreach ($tags as $tag) {
                                        $this->Query("delete from ".$this->config["table_prefix"]."pages where time = '".mysql_escape_string($page[time])."' and tag = '".mysql_escape_string($tag[tag])."'");
                                }
                        }
                }
        }



        // COOKIES
        function SetSessionCookie($name, $value) { SetCookie($name, $value, 0, $this->CookiePath); $_COOKIE[$name] = $value; }
        function SetPersistentCookie($name, $value, $remember = 0) { SetCookie($name, $value, time() + ($remember ? 90*24*60*60 : 60 * 60), $this->CookiePath); $_COOKIE[$name] = $value; }
        function DeleteCookie($name) { SetCookie($name, "", 1, $this->CookiePath); $_COOKIE[$name] = ""; }
        function GetCookie($name) { return $_COOKIE[$name]; }



        // HTTP/REQUEST/LINK RELATED
        function SetMessage($message) { $_SESSION["message"] = $message; }
        function GetMessage()
        {
                if (isset($_SESSION["message"])) $message = $_SESSION["message"];
                else $message = "";
                $_SESSION["message"] = "";
                return $message;
        }
        function Redirect($url)
        {
                header("Location: $url");
                exit;
        }
        // returns just PageName[/method].
        function MiniHref($method = "", $tag = "")
        {
                if (!$tag = trim($tag)) $tag = $this->tag;
                return $tag.($method ? "/".$method : "");
        }
        // returns the full url to a page/method.
        function Href($method = "", $tag = "", $params = "")
        {
                $href = $this->config["base_url"].$this->MiniHref($method, $tag);
                if ($params)
                {
                        $href .= ($this->config["rewrite_mode"] ? "?" : "&amp;").$params;
                }
                return $href;
        }
        function Link($tag, $method = "", $text = "", $track = 1) {
                $tag=htmlspecialchars($tag); //avoid xss
                $text=htmlspecialchars($text); //paranoiac again
                if (!$text) $text = $tag;

                // is this an interwiki link?
                if (preg_match("/^([A-Z][A-Z,a-z]+)[:]([A-Z,a-z,0-9]*)$/s", $tag, $matches))
                {
                        $tag = $this->GetInterWikiUrl($matches[1], $matches[2]);
                        return "<a href=\"$tag\">$text (interwiki)</a>";
                }
                // is this a full link? ie, does it contain non alpha-numeric characters?
                // Note : [:alnum:] is equivalent [0-9A-Za-z]
                //        [^[:alnum:]] means : some caracters other than [0-9A-Za-z]
                // For example : "www.adress.com", "mailto:adress@domain.com", "http://www.adress.com"
                else if (preg_match("/[^[:alnum:]]/", $tag))
                {
                        // check for email addresses
                        if (preg_match("/^.+\@.+$/", $tag))
                        {
                                $tag = "mailto:".$tag;
                        }
                        // check for protocol-less URLs
                        else if (!preg_match("/:\/\//", $tag))
                        {
                                $tag = "http://".$tag;  //Very important for xss (avoid javascript:() hacking)
                        }
                        // is this an inline image (text!=tag and url ends png,gif,jpeg)
                        if ($text!=$tag and preg_match("/.(gif|jpeg|png|jpg)$/i",$tag))
                        {
                                return "<img src=\"$tag\" alt=\"$text\" />";
                        }
                        else
                        {
                                return "<a href=\"$tag\">$text</a>";
                        }
                }
                else
                {
                        // it's a Wiki link!
                        if (isset($_SESSION["linktracking"]) && $track) $this->TrackLinkTo($tag);
                        return ($this->LoadPage($tag) ? "<a href=\"".$this->href($method, $tag)."\">".$text."</a>" : "<span class=\"missingpage\">".$text."</span><a href=\"".$this->href("edit", $tag)."\">?</a>");
                }
        }
        function ComposeLinkToPage($tag, $method = "", $text = "", $track = 1) {
                if (!$text) $text = $tag;
                $text = htmlentities($text);
                if (isset($_SESSION["linktracking"]) && $track)
                        $this->TrackLinkTo($tag);
                return '<a href="'.$this->href($method, $tag).'">'.$text.'</a>';
        }
        // function PregPageLink($matches) { return $this->Link($matches[1]); }
        function IsWikiName($text) { return preg_match("/^[A-Z][a-z]+[A-Z,0-9][A-Z,a-z,0-9]*$/", $text); }
        function TrackLinkTo($tag) { $_SESSION["linktable"][] = $tag; }
        function GetLinkTable() { return $_SESSION["linktable"]; }
        function ClearLinkTable() { $_SESSION["linktable"] = array(); }
        function StartLinkTracking() { $_SESSION["linktracking"] = 1; }
        function StopLinkTracking() { $_SESSION["linktracking"] = 0; }
        function WriteLinkTable() {
                // delete old link table
                $this->Query("delete from ".$this->config["table_prefix"]."links where from_tag = '".mysql_escape_string($this->GetPageTag())."'");
                if ($linktable = $this->GetLinkTable())
                {
                        $from_tag = mysql_escape_string($this->GetPageTag());
                        foreach ($linktable as $to_tag)
                        {
                                $lower_to_tag = strtolower($to_tag);
                                if (!$written[$lower_to_tag])
                                {
                                        $this->Query("insert into ".$this->config["table_prefix"]."links set from_tag = '".$from_tag."', to_tag = '".mysql_escape_string($to_tag)."'");
                                        $written[$lower_to_tag] = 1;
                                }
                        }
                }
        }
        function Header() { return $this->Action($this->GetConfigValue("header_action"), 1); }
        function Footer() { return $this->Action($this->GetConfigValue("footer_action"), 1); }



        // FORMS
        function FormOpen($method = "", $tag = "", $formMethod = "post") {
        /* Debut de la modif ACeditor */
        // ACEditor: id=\"ACEditor\" name=\"ACEditor\" ci-dessous le if a été ajouté (initialement, seule la ligne du else existait)
        // si l'url se termine par edit (expression régulière edit$), on est en mode édition et dans ce cas on donne les id et name au formulaire
        // Sinon surtout pas car ça marche plus dans la mesure ou plusieurs formulaires auraient ces ID et name et dans ce cas
        // il semble que le dernier soit considéré, c'est à dire pas le bon :o(

                if (ereg('edit$', $this->href($method, $tag))) {
                        $result = "<form id=\"ACEditor\" name=\"ACEditor\" action=\"".$this->href($method, $tag)."\" method=\"".$formMethod."\">\n";
                } else {
                $result = "<form action=\"".$this->href($method, $tag)."\" method=\"".$formMethod."\">\n";
                }

/* fin de la modif ACeditor */
                if (!$this->config["rewrite_mode"]) $result .= "<input type=\"hidden\" name=\"wiki\" value=\"".$this->MiniHref($method, $tag)."\" />\n";
                return $result;
        }
        function FormClose() {
                return "</form>\n";
        }



        // INTERWIKI STUFF
        function ReadInterWikiConfig() {
                if ($lines = file("interwiki.conf"))
                {
                        foreach ($lines as $line)
                        {
                                if ($line = trim($line))
                                {
                                        list($wikiName, $wikiUrl) = explode(" ", trim($line));
                                        $this->AddInterWiki($wikiName, $wikiUrl);
                                }
                        }
                }
        }
        function AddInterWiki($name, $url) {
                $this->interWiki[$name] = $url;
        }
        function GetInterWikiUrl($name, $tag) {
                if (isset($this->interWiki[$name]))
                {
                        return $this->interWiki[$name].$tag;
                } else {
                return 'http://'.$tag; //avoid xss by putting http:// in front of JavaScript:()
                }
        }



        // REFERRERS
        function LogReferrer($tag = "", $referrer = "") {
                // fill values
                if (!$tag = trim($tag)) $tag = $this->GetPageTag();
                if (!$referrer = trim($referrer) AND isset($_SERVER["HTTP_REFERER"])) $referrer = $_SERVER["HTTP_REFERER"];
                
                // check if it's coming from another site
                if ($referrer && !preg_match("/^".preg_quote($this->GetConfigValue("base_url"), "/")."/", $referrer))
                {
                        $this->Query("insert into ".$this->config["table_prefix"]."referrers set ".
                                "page_tag = '".mysql_escape_string($tag)."', ".
                                "referrer = '".mysql_escape_string($referrer)."', ".
                                "time = now()");
                }
        }
        function LoadReferrers($tag = "") {
                return $this->LoadAll("select referrer, count(referrer) as num from ".$this->config["table_prefix"]."referrers ".($tag = trim($tag) ? "where page_tag = '".mysql_escape_string($tag)."'" : "")." group by referrer order by num desc");
        }
        function PurgeReferrers() {
                if ($days = $this->GetConfigValue("referrers_purge_time")) {
                        $this->Query("delete from ".$this->config["table_prefix"]."referrers where time < date_sub(now(), interval '".mysql_escape_string($days)."' day)");
                }
        }



        // PLUGINS
        function Action($action, $forceLinkTracking = 0)
        {
                $action = trim($action); $vars=array();
                // stupid attributes check
                if ((stristr($action, "=\"")) || (stristr($action, "/")))
                {
                        // extract $action and $vars_temp ("raw" attributes)
                        preg_match("/^([A-Za-z0-9]*)\/?(.*)$/", $action, $matches);
                        list(, $action, $vars_temp) = $matches;
                        // match all attributes (key and value)
                        $this->parameter[$vars_temp]=$vars_temp;
                        preg_match_all("/([A-Za-z0-9]*)=\"(.*)\"/U", $vars_temp, $matches);

                // prepare an array for extract() to work with (in $this->IncludeBuffered())
                if (is_array($matches))
                        {
                                for ($a = 0; $a < count($matches[1]); $a++)
                                {
                                        $vars[$matches[1][$a]] = $matches[2][$a];
                                        $this->parameter[$matches[1][$a]]=$matches[2][$a];
                                }
                        }
                }
                if (!$forceLinkTracking) $this->StopLinkTracking();
                $result = $this->IncludeBuffered(strtolower($action).".php", "<i>Action inconnue \"$action\"</i>", $vars, $this->config["action_path"]);
                $this->StartLinkTracking();
                if (isset($parameter)) unset($this->parameter[$parameter]);
                unset($this->parameter);
                return $result;
        }
        function Method($method) {
                if (!$handler = $this->page["handler"]) $handler = "page";
                $methodLocation = $handler."/".$method.".php";
                return $this->IncludeBuffered($methodLocation, "<i>M&eacute;thode inconnue \"$methodLocation\"</i>", "", $this->config["handler_path"]);
        }
        function Format($text, $formatter = "wakka") {
                return $this->IncludeBuffered("formatters/".$formatter.".php", "<i>Impossible de trouver le formateur \"$formatter\"</i>", compact("text")); 
        }



        // USERS
        function LoadUser($name, $password = 0) { return $this->LoadSingle("select * from ".$this->config["table_prefix"]."users where name = '".mysql_escape_string($name)."' ".($password === 0 ? "" : "and password = '".mysql_escape_string($password)."'")." limit 1"); }
        function LoadUsers() { return $this->LoadAll("select * from ".$this->config["table_prefix"]."users order by name"); }
        function GetUserName() { if ($user = $this->GetUser()) $name = $user["name"]; else if (!$name = gethostbyaddr($_SERVER["REMOTE_ADDR"])) $name = $_SERVER["REMOTE_ADDR"]; return $name; }
        function UserName() { /* deprecated! */ return $this->GetUserName(); }
        function GetUser() { return (isset($_SESSION["user"]) ? $_SESSION["user"] : '');}
        function SetUser($user, $remember=0) { $_SESSION["user"] = $user; $this->SetPersistentCookie("name", $user["name"], $remember); $this->SetPersistentCookie("password", $user["password"], $remember); $this->SetPersistentCookie("remember", $remember, $remember); }
        function LogoutUser() { $_SESSION["user"] = ""; $this->DeleteCookie("name"); $this->DeleteCookie("password"); }
        function UserWantsComments() { if (!$user = $this->GetUser()) return false; return ($user["show_comments"] == "Y"); }
        function GetParameter($parameter, $default = '') { return (isset($this->parameter[$parameter]) ? $this->parameter[$parameter] : $default); }


        
        // COMMENTS
        function LoadComments($tag) { return $this->LoadAll("select * from ".$this->config["table_prefix"]."pages where comment_on = '".mysql_escape_string($tag)."' and latest = 'Y' order by time"); }
        function LoadRecentComments() { return $this->LoadAll("select * from ".$this->config["table_prefix"]."pages where comment_on != '' and latest = 'Y' order by time desc"); }
        function LoadRecentlyCommented($limit = 50) {
                // NOTE: this is really stupid. Maybe my SQL-Fu is too weak, but apparently there is no easier way to simply select
                //       all comment pages sorted by their first revision's (!) time. ugh!
                
                // load ids of the first revisions of latest comments. err, huh?
                $pages=array();
                $comments=array();
                if ($ids = $this->LoadAll("select min(id) as id from ".$this->config["table_prefix"]."pages where comment_on != '' group by tag order by id desc"))
                {
                        // load complete comments
                        foreach ($ids as $id)
                        {
                                $comment = $this->LoadSingle("select * from ".$this->config["table_prefix"]."pages where id = '".$id["id"]."' limit 1");
                                $num=0;
                                if (!isset($comments[$comment["comment_on"]])) $comments[$comment["comment_on"]]='';
                                if (!$comments[$comment["comment_on"]] && $num < $limit)
                                {
                                        $comments[$comment["comment_on"]] = $comment;
                                        $num++;
                                }
                        }
                
                        // now load pages
                        if ($comments)
                        {
                                // now using these ids, load the actual pages
                                foreach ($comments as $comment)
                                {
                                        $page = $this->LoadPage($comment["comment_on"]);
                                        $page["comment_user"] = $comment["user"];
                                        $page["comment_time"] = $comment["time"];
                                        $page["comment_tag"] = $comment["tag"];
                                        $pages[] = $page;
                                }
                        }
                }
                // load tags of pages 
                //return $this->LoadAll("select comment_on as tag, max(time) as time, tag as comment_tag, user from ".$this->config["table_prefix"]."pages where comment_on != '' group by comment_on order by time desc");
                return $pages;
        }



        // ACCESS CONTROL
        // returns true if logged in user is owner of current page, or page specified in $tag
        function UserIsOwner($tag = "") {
                // check if user is logged in
                if (!$this->GetUser()) return false;

                // set default tag
                if (!$tag = trim($tag)) $tag = $this->GetPageTag();
                
                // check if user is owner
                if ($this->GetPageOwner($tag) == $this->GetUserName()) return true;
        }
        function GetPageOwner($tag = "", $time = "") { if (!$tag = trim($tag)) $tag = $this->GetPageTag(); if ($page = $this->LoadPage($tag, $time)) return $page["owner"]; }
        function SetPageOwner($tag, $user) {
                // check if user exists
                if (!$this->LoadUser($user)) return;
                
                // updated latest revision with new owner
                $this->Query("update ".$this->config["table_prefix"]."pages set owner = '".mysql_escape_string($user)."' where tag = '".mysql_escape_string($tag)."' and latest = 'Y' limit 1");
        }
        function LoadAcl($tag, $privilege, $useDefaults = 1) {
                if ((!$acl = $this->LoadSingle("select * from ".$this->config["table_prefix"]."acls where page_tag = '".mysql_escape_string($tag)."' and privilege = '".mysql_escape_string($privilege)."' limit 1")) && $useDefaults)
                {
                        $acl = array("page_tag" => $tag, "privilege" => $privilege, "list" => $this->GetConfigValue("default_".$privilege."_acl"));
                }
                return $acl;
        }
        function SaveAcl($tag, $privilege, $list) {
                if ($this->LoadAcl($tag, $privilege, 0)) $this->Query("update ".$this->config["table_prefix"]."acls set list = '".mysql_escape_string(trim(str_replace("\r", "", $list)))."' where page_tag = '".mysql_escape_string($tag)."' and privilege = '".mysql_escape_string($privilege)."' limit 1");
                else $this->Query("insert into ".$this->config["table_prefix"]."acls set list = '".mysql_escape_string(trim(str_replace("\r", "", $list)))."', page_tag = '".mysql_escape_string($tag)."', privilege = '".mysql_escape_string($privilege)."'");
        }
        // returns true if $user (defaults to current user) has access to $privilege on $page_tag (defaults to current page)
        function HasAccess($privilege, $tag = "", $user = "") {
                // set defaults
                if (!$tag = trim($tag)) $tag = $this->GetPageTag();
                if (!$user = $this->GetUserName());
                
                // load acl
                $acl = $this->LoadAcl($tag, $privilege);
                
                // if current user is owner, return true. owner can do anything!
                if ($this->UserIsOwner($tag)) return true;
                
                // fine fine... now go through acl
                foreach (explode("\n", $acl["list"]) as $line)
                {
                        $line = trim($line);

                        // check for inversion character "!"
                        if (preg_match("/^[!](.*)$/", $line, $matches))
                        {
                                $negate = 1;
                                $line = $matches[1];
                        }
                        else
                        {
                                $negate = 0;
                        }

                        // if there's still anything left... lines with just a "!" don't count!
                        if ($line)
                        {
                                switch ($line[0])
                                {
                                // comments
                                case "#":
                                        break;
                                // everyone
                                case "*":
                                        return !$negate;
                                // aha! a user entry.
                                case "+":
                                        if (!$this->LoadUser($user)) 
                                        {
                                                return $negate;
                                        }
                                        else
                                        {
                                                return !$negate;
                                        }
                                default:
                                        if ($line == $user)
                                        {
                                                return !$negate;
                                        }
                                }
                        }
                }
                
                // tough luck.
                return false;
        }



        // MAINTENANCE
        function Maintenance() {
                // purge referrers
                $this->PurgeReferrers();
                // purge old page revisions
                $this->PurgePages();
        }



        // THE BIG EVIL NASTY ONE!
        function Run($tag, $method = "") {
                if(!($this->GetMicroTime()%3)) $this->Maintenance(); 

                $this->ReadInterWikiConfig();

                // do our stuff!
                if (!$this->method = trim($method)) $this->method = "show";
                if (!$this->tag = trim($tag)) $this->Redirect($this->href("", $this->config["root_page"]));
                if ((!$this->GetUser() && isset($_COOKIE["name"])) && ($user = $this->LoadUser($_COOKIE["name"], $_COOKIE["password"]))) $this->SetUser($user, $_COOKIE["remember"]);
                $this->SetPage($this->LoadPage($tag, (isset($_REQUEST["time"]) ? $_REQUEST["time"] :'')));
                $this->LogReferrer();

      //correction pour un support plus facile de nouveaux handlers
      print($this->Method($this->method));
        }
}



// stupid version check
if (!isset($_REQUEST)) die('$_REQUEST[] not found. Wakka requires PHP 4.1.0 or higher!');

// workaround for the amazingly annoying magic quotes.
function magicQuotesSuck(&$a)
{
        if (is_array($a))
        {
                foreach ($a as $k => $v)
                {
                        if (is_array($v))
                                magicQuotesSuck($a[$k]);
                        else
                                $a[$k] = stripslashes($v);
                }
        }
}
set_magic_quotes_runtime(0);
if (get_magic_quotes_gpc())
{
        magicQuotesSuck($_POST);
        magicQuotesSuck($_GET);
        magicQuotesSuck($_COOKIE);
}


// default configuration values
$wakkaConfig= array();
$wakkaDefaultConfig = array(
        'wakka_version'         => '',
        'wikini_version'        => '',
        'debug'                 => 'no',
        "mysql_host"            => "localhost",
        "mysql_database"                => "wikini",
        "mysql_user"            => "wikini",
        "mysql_password"                => '',
        "table_prefix"          => "wikini_",
        "root_page"                     => "PagePrincipale",
        "wakka_name"            => "MonSiteWikiNi",
        "base_url"                      => "http://".$_SERVER["SERVER_NAME"].($_SERVER["SERVER_PORT"] != 80 ? ":".$_SERVER["SERVER_PORT"] : "").$_SERVER["REQUEST_URI"].(preg_match("/".preg_quote("wakka.php")."$/", $_SERVER["REQUEST_URI"]) ? "?wiki=" : ""),
        "rewrite_mode"          => (preg_match("/".preg_quote("wakka.php")."$/", $_SERVER["REQUEST_URI"]) ? "0" : "1"),
        'meta_keywords'         => '',
        'meta_description'      => '',
        "action_path"           => "actions",
        "handler_path"          => "handlers",
        "header_action"         => "header",
        "footer_action"         => "footer",
        "navigation_links"              => "DerniersChangements :: DerniersCommentaires :: ParametresUtilisateur",
        "referrers_purge_time"  => 24,
        "pages_purge_time"      => 90,
        "default_write_acl"     => "*",
        "default_read_acl"      => "*",
        "default_comment_acl"   => "*",
        "menu_page"             => "PageMenu",
        "preview_before_save"   => "0");

// load config
if (!$configfile = GetEnv("WAKKA_CONFIG")) $configfile = "wakka.config.php";
if (file_exists($configfile)) include($configfile);
$wakkaConfigLocation = $configfile;
$wakkaConfig = array_merge($wakkaDefaultConfig, $wakkaConfig);

// check for locking
if (file_exists("locked")) {
        // read password from lockfile
        $lines = file("locked");
        $lockpw = trim($lines[0]);
        
        // is authentification given?
        if (isset($_SERVER["PHP_AUTH_USER"])) {
                if (!(($_SERVER["PHP_AUTH_USER"] == "admin") && ($_SERVER["PHP_AUTH_PW"] == $lockpw))) {
                        $ask = 1;
                }
        } else {
                $ask = 1;
        }
        
        if ($ask) {
                header("WWW-Authenticate: Basic realm=\"".$wakkaConfig["wakka_name"]." Install/Upgrade Interface\"");
                header("HTTP/1.0 401 Unauthorized");
                echo "Ce site est en cours de mise &agrave; jour. Veuillez essayer plus tard." ;
                exit;
        }
}


// compare versions, start installer if necessary
if ($wakkaConfig["wakka_version"] && (!$wakkaConfig["wikini_version"])) { $wakkaConfig["wikini_version"]=$wakkaConfig["wakka_version"]; }
if (($wakkaConfig["wakka_version"] != WAKKA_VERSION) || ($wakkaConfig["wikini_version"] != WIKINI_VERSION)) {
        // start installer
        if (!isset($_REQUEST["installAction"]) OR !$installAction = trim($_REQUEST["installAction"])) $installAction = "default";
        include("setup/header.php");
        if (file_exists("setup/".$installAction.".php")) include("setup/".$installAction.".php"); else echo "<i>Invalid action</i>" ;
        include("setup/footer.php");
        exit;
}


// configuration du cookie de session
//determine le chemin pour le cookie
$a = parse_url($wakkaConfig['base_url']);
$CookiePath = dirname($a['path']);
if ($CookiePath != '/') $CookiePath .= '/';
$a = session_get_cookie_params();
session_set_cookie_params($a['lifetime'],$CookiePath);
unset($a);
unset($CookiePath);

// start session
session_start();

// fetch wakka location
if (!isset($_REQUEST["wiki"])) $_REQUEST["wiki"] = '';
 
$wiki = $_REQUEST["wiki"];

// remove leading slash
$wiki = preg_replace("/^\//", "", $wiki);

// split into page/method
if (preg_match("#^(.+?)/([A-Za-z0-9_]*)$#", $wiki, $matches)) list(, $page, $method) = $matches;
else if (preg_match("#^(.*)$#", $wiki, $matches)) list(, $page) = $matches;

// create wiki object
$wiki = new Wiki($wakkaConfig);
// check for database access
if (!$wiki->dblink)
{
        echo "<p>Pour des raisons ind&eacute;pendantes de notre volont&eacute;, le contenu de ce Wiki est temporairement inaccessible. Veuillez r&eacute;essayer ult&eacute;rieurement, merci de votre compr&eacute;hension.</p>";
        exit;
}

function compress_output($output) 
{ 
        return gzencode($output); 
} 

// Check if the browser supports gzip encoding, HTTP_ACCEPT_ENCODING 
if (strstr ($HTTP_SERVER_VARS['HTTP_ACCEPT_ENCODING'], 'gzip') && function_exists('gzencode') )
{ 
        // Start output buffering, and register compress_output() (see 
        // below) 
//      ob_start ("compress_output"); 

        // Tell the browser the content is compressed with gzip 
//      header ("Content-Encoding: gzip"); 
} 


// go!
if (!isset($method)) $method='';

// Security (quick hack)  : Check method syntax
if (!(preg_match('#^[A-Za-z0-9_]*$#',$method))) {
        $method='';
}

include('tools/prepend.php');//$wiki->Run($page, $method);
?>