2 /////////////////////////////////////////////////
3 // PukiWiki - Yet another WikiWikiWeb clone.
5 // $Id: init.php,v 1.5 2004/08/11 14:33:52 henoheno Exp $
8 // ½é´üÀßÄê (¥¨¥é¡¼½ÐÎÏ¥ì¥Ù¥ë)
9 error_reporting(E_ERROR | E_PARSE); // (E_WARNING | E_NOTICE)¤ò½ü³°¤·¤Æ¤¤¤Þ¤¹
10 //error_reporting(E_ALL);
12 /////////////////////////////////////////////////
13 // ½é´üÀßÄê (ʸ»ú¥¨¥ó¥³¡¼¥É¡¢¸À¸ì)
14 define('LANG', 'ja'); // Select 'ja' or 'en'
15 define('SOURCE_ENCODING', 'EUC-JP');
17 // mbstring extension ´ØÏ¢
18 mb_language('Japanese');
19 mb_internal_encoding(SOURCE_ENCODING);
20 ini_set('mbstring.http_input', 'pass');
21 mb_http_output('pass');
22 mb_detect_order('auto');
24 /////////////////////////////////////////////////
25 // ½é´üÀßÄê(ÀßÄê¥Õ¥¡¥¤¥ë¤Î¾ì½ê)
26 define('LANG_FILE', DATA_HOME . LANG . '.lng');
27 define('INI_FILE', DATA_HOME . 'pukiwiki.ini.php');
29 /////////////////////////////////////////////////
30 // ¥Ð¡¼¥¸¥ç¥ó / Ãøºî¸¢
31 define('S_VERSION', '1.4.4rc1');
33 '<strong>PukiWiki ' . S_VERSION . '</strong>' .
34 ' Copyright © 2001-2004' .
35 ' <a href="http://pukiwiki.org">PukiWiki Developers Team</a>.' .
36 ' License is <a href="http://www.gnu.org/licenses/gpl.html">GPL</a>.<br />' .
37 ' Based on "PukiWiki" 1.3 by <a href="http://factage.com/yu-ji/">yu-ji</a>'
40 /////////////////////////////////////////////////
41 // ½é´üÀßÄê (¥µ¡¼¥ÐÊÑ¿ô)
42 foreach (array('SCRIPT_NAME', 'SERVER_ADMIN', 'SERVER_NAME',
43 'SERVER_PORT', 'SERVER_SOFTWARE') as $key) {
44 define($key, isset($_SERVER[$key]) ? $_SERVER[$key] : '');
45 unset(${$key}, $_SERVER[$key], $HTTP_SERVER_VARS[$key]);
48 /////////////////////////////////////////////////
49 // ½é´üÀßÄê (¥°¥í¡¼¥Ð¥ëÊÑ¿ô)
51 $foot_explain = array(); // µÓÃí
52 $related = array(); // ´ØÏ¢¤¹¤ë¥Ú¡¼¥¸
53 $head_tags = array(); // <head>Æâ¤ËÄɲ乤륿¥°
55 /////////////////////////////////////////////////
57 define('LOCALZONE', date('Z'));
58 define('UTIME', time() - LOCALZONE);
59 define('MUTIME', getmicrotime());
61 /////////////////////////////////////////////////
64 foreach(array('LANG_FILE', 'INI_FILE') as $file){
65 if (! file_exists(constant($file)) || ! is_readable(constant($file))) {
66 $die = "${die}File is not found. ($file)\n";
68 require(constant($file));
71 if ($die) { die_message(nl2br("\n\n" . $die)); }
73 /////////////////////////////////////////////////
74 // INI_FILE: $script: ½é´üÀßÄê
75 if (! isset($script) or $script == '') {
76 $script = get_script_uri();
77 if ($script === FALSE or (php_sapi_name() == 'cgi' and ! is_url($script, TRUE))) {
78 die_message('get_script_uri() failed: Please set $script at INI_FILE manually.');
82 /////////////////////////////////////////////////
83 // INI_FILE: $agents: UserAgent¤Î¼±ÊÌ
85 $ua = 'HTTP_USER_AGENT';
86 $user_agent = $matches = array();
88 $user_agent['agent'] = isset($_SERVER['HTTP_USER_AGENT']) ? $_SERVER['HTTP_USER_AGENT'] : '';
89 unset(${$ua}, $_SERVER[$ua], $HTTP_SERVER_VARS[$ua], $ua); // safety
91 foreach ($agents as $agent) {
92 if (preg_match($agent['pattern'], $user_agent['agent'], $matches)) {
93 $user_agent['profile'] = isset($agent['profile']) ? $agent['profile'] : '';
94 $user_agent['name'] = isset($matches[1]) ? $matches[1] : ''; // device or browser name
95 $user_agent['vers'] = isset($matches[2]) ? $matches[2] : ''; // 's version
99 unset($agents, $matches);
101 // Profile-related init and setting
102 define('UA_PROFILE', isset($user_agent['profile']) ? $user_agent['profile'] : '');
104 define('UA_INI_FILE', DATA_HOME . UA_PROFILE . '.ini.php');
105 if (! file_exists(UA_INI_FILE) || ! is_readable(UA_INI_FILE)) {
106 die_message('UA_INI_FILE for "' . UA_PROFILE . '" not found.');
108 require(UA_INI_FILE); // Also manually
111 define('UA_NAME', isset($user_agent['name']) ? $user_agent['name'] : '');
112 define('UA_VERS', isset($user_agent['vers']) ? $user_agent['vers'] : '');
113 unset($user_agent); // Unset after reading UA_INI_FILE
115 /////////////////////////////////////////////////
116 // ¥Ç¥£¥ì¥¯¥È¥ê¤Î¥Á¥§¥Ã¥¯
119 foreach(array('DATA_DIR', 'DIFF_DIR', 'BACKUP_DIR', 'CACHE_DIR') as $dir){
120 if (! is_writable(constant($dir))) {
121 $die = "${die}Directory is not found or not writable ($dir)\n";
125 // ÀßÄê¥Õ¥¡¥¤¥ë¤ÎÊÑ¿ô¥Á¥§¥Ã¥¯
127 foreach(array('rss_max', 'page_title', 'note_hr', 'related_link', 'show_passage',
128 'rule_related_str', 'load_template_func') as $var){
129 if (! isset(${$var})) { $temp .= "\$$var\n"; }
132 if ($die) { $die .= "\n"; } // A breath
133 $die = "${die}Variable(s) not found: (Maybe the old *.ini.php?)\n" . $temp;
137 foreach(array('LANG', 'PLUGIN_DIR') as $def){
138 if (! defined($def)) $temp .= "$def\n";
141 if ($die) { $die .= "\n"; } // A breath
142 $die = "${die}Define(s) not found: (Maybe the old *.ini.php?)\n" . $temp;
145 if($die){ die_message(nl2br("\n\n" . $die)); }
148 /////////////////////////////////////////////////
149 // ɬ¿Ü¤Î¥Ú¡¼¥¸¤¬Â¸ºß¤·¤Ê¤±¤ì¤Ð¡¢¶õ¤Î¥Õ¥¡¥¤¥ë¤òºîÀ®¤¹¤ë
151 foreach(array($defaultpage, $whatsnew, $interwiki) as $page){
152 if (! is_page($page)) { touch(get_filename($page)); }
155 /////////////////////////////////////////////////
156 // ³°Éô¤«¤é¤¯¤ëÊÑ¿ô¤Î¥Á¥§¥Ã¥¯
158 // Prohibit $_GET attack
159 foreach (array('msg', 'pass') as $key) {
160 if (isset($_GET[$key])) die_message("Sorry, already reserved: $key=");
164 unset($HTTP_GET_VARS, $HTTP_POST_VARS); //, 'SERVER', 'ENV', 'SESSION', ...
165 unset($_REQUEST); // Considered harmful
167 // Remove null character etc.
168 $_GET = input_filter($_GET);
169 $_POST = input_filter($_POST);
170 $_COOKIE = input_filter($_COOKIE);
172 // ʸ»ú¥³¡¼¥ÉÊÑ´¹ ($_POST)
173 // <form> ¤ÇÁ÷¿®¤µ¤ì¤¿Ê¸»ú (¥Ö¥é¥¦¥¶¤¬¥¨¥ó¥³¡¼¥É¤·¤¿¥Ç¡¼¥¿) ¤Î¥³¡¼¥É¤òÊÑ´¹
174 // POST method ¤Ï¾ï¤Ë form ·Ðͳ¤Ê¤Î¤Ç¡¢É¬¤ºÊÑ´¹¤¹¤ë
176 if (isset($_POST['encode_hint']) && $_POST['encode_hint'] != '') {
177 // html.php ¤ÎÃæ¤Ç¡¢<form> ¤Ë encode_hint ¤ò»Å¹þ¤ó¤Ç¤¤¤ë¤Î¤Ç¡¢
178 // encode_hint ¤òÍѤ¤¤Æ¥³¡¼¥É¸¡½Ð¤¹¤ë¡£
179 // Á´ÂΤò¸«¤Æ¥³¡¼¥É¸¡½Ð¤¹¤ë¤È¡¢µ¡¼ï°Í¸ʸ»ú¤ä¡¢Ì¯¤Ê¥Ð¥¤¥Ê¥ê
180 // ¥³¡¼¥É¤¬º®Æþ¤·¤¿¾ì¹ç¤Ë¡¢¥³¡¼¥É¸¡½Ð¤Ë¼ºÇÔ¤¹¤ë¶²¤ì¤¬¤¢¤ë¡£
181 $encode = mb_detect_encoding($_POST['encode_hint']);
182 mb_convert_variables(SOURCE_ENCODING, $encode, $_POST);
184 } else if (isset($_POST['charset']) && $_POST['charset'] != '') {
185 // TrackBack Ping ¤Ç»ØÄꤵ¤ì¤Æ¤¤¤ë¤³¤È¤¬¤¢¤ë
186 // ¤¦¤Þ¤¯¤¤¤«¤Ê¤¤¾ì¹ç¤Ï¼«Æ°¸¡½Ð¤ËÀÚ¤êÂؤ¨
187 if (mb_convert_variables(SOURCE_ENCODING,
188 $_POST['charset'], $_POST) !== $_POST['charset']) {
189 mb_convert_variables(SOURCE_ENCODING, 'auto', $_POST);
192 } else if (! empty($_POST)) {
193 // Á´Éô¤Þ¤È¤á¤Æ¡¢¼«Æ°¸¡½Ð¡¿ÊÑ´¹
194 mb_convert_variables(SOURCE_ENCODING, 'auto', $_POST);
197 // ʸ»ú¥³¡¼¥ÉÊÑ´¹ ($_GET)
198 // GET method ¤Ï form ¤«¤é¤Î¾ì¹ç¤È¡¢<a href="http://script/?key=value> ¤Î¾ì¹ç¤¬¤¢¤ë
199 // <a href...> ¤Î¾ì¹ç¤Ï¡¢¥µ¡¼¥Ð¡¼¤¬ rawurlencode ¤·¤Æ¤¤¤ë¤Î¤Ç¡¢¥³¡¼¥ÉÊÑ´¹¤ÏÉÔÍ×
200 if (isset($_GET['encode_hint']) && $_GET['encode_hint'] != '')
202 // form ·Ðͳ¤Î¾ì¹ç¤Ï¡¢¥Ö¥é¥¦¥¶¤¬¥¨¥ó¥³¡¼¥É¤·¤Æ¤¤¤ë¤Î¤Ç¡¢¥³¡¼¥É¸¡½Ð¡¦ÊÑ´¹¤¬É¬Íס£
203 // encode_hint ¤¬´Þ¤Þ¤ì¤Æ¤¤¤ë¤Ï¤º¤Ê¤Î¤Ç¡¢¤½¤ì¤ò¸«¤Æ¡¢¥³¡¼¥É¸¡½Ð¤·¤¿¸å¡¢ÊÑ´¹¤¹¤ë¡£
204 // Íýͳ¤Ï¡¢post ¤ÈƱÍÍ
205 $encode = mb_detect_encoding($_GET['encode_hint']);
206 mb_convert_variables(SOURCE_ENCODING, $encode, $_GET);
210 /////////////////////////////////////////////////
211 // QUERY_STRING¤ò¼èÆÀ
213 // cmd¤âplugin¤â»ØÄꤵ¤ì¤Æ¤¤¤Ê¤¤¾ì¹ç¤Ï¡¢QUERY_STRING¤ò
214 // ¥Ú¡¼¥¸Ì¾¤«InterWikiName¤Ç¤¢¤ë¤È¤ß¤Ê¤¹
216 if (isset($_SERVER['QUERY_STRING']) && $_SERVER['QUERY_STRING']) {
217 $arg = $_SERVER['QUERY_STRING'];
218 } else if (isset($_SERVER['argv']) && count($_SERVER['argv'])) {
219 $arg = $_SERVER['argv'][0];
221 $arg = input_filter($arg); // \0 ½üµî
223 // unset QUERY_STRINGs
224 foreach (array('QUERY_STRING', 'argv', 'argc') as $key) {
225 unset(${$key}, $_SERVER[$key], $HTTP_SERVER_VARS[$key]);
227 // $_SERVER['REQUEST_URI'] is used at func.php NOW
228 unset($REQUEST_URI, $HTTP_SERVER_VARS['REQUEST_URI']);
230 // mb_convert_variables¤Î¥Ð¥°(?)Âкö: ÇÛÎó¤ÇÅϤµ¤Ê¤¤¤ÈÍî¤Á¤ë
232 mb_convert_variables(SOURCE_ENCODING, 'auto', $arg);
235 /////////////////////////////////////////////////
236 // QUERY_STRING¤òʬ²ò¤·¤Æ¥³¡¼¥ÉÊÑ´¹¤·¡¢$_GET ¤Ë¾å½ñ¤
238 // URI ¤ò urlencode ¤»¤º¤ËÆþÎϤ·¤¿¾ì¹ç¤ËÂн褹¤ë
240 foreach (explode('&', $arg) as $key_and_value) {
241 if (preg_match('/^([^=]+)=(.+)/', $key_and_value, $matches) &&
242 mb_detect_encoding($matches[2]) != 'ASCII') {
243 $_GET[$matches[1]] = $matches[2];
248 /////////////////////////////////////////////////
253 $cookie = & $_COOKIE;
255 // GET + POST = $vars
257 $vars = & $_GET; // Major pattern: Read-only access via GET
258 } else if (empty($_GET)) {
259 $vars = & $_POST; // Minor pattern: Write access via POST etc.
261 $vars = array_merge($_GET, $_POST); // Considered reliable than $_REQUEST
264 // ÆþÎÏ¥Á¥§¥Ã¥¯: cmd, plugin ¤Îʸ»úÎó¤Ï±Ñ¿ô»ú°Ê³°¤¢¤ê¤¨¤Ê¤¤
265 foreach(array('cmd', 'plugin') as $var) {
266 if (array_key_exists($var, $vars) &&
267 ! preg_match('/^[a-zA-Z][a-zA-Z0-9_]*$/', $vars[$var])) {
268 unset($get[$var], $post[$var], $vars[$var]);
272 // À°·Á: page, strip_bracket()
273 if (isset($vars['page'])) {
274 $get['page'] = $post['page'] = $vars['page'] = strip_bracket($vars['page']);
276 $get['page'] = $post['page'] = $vars['page'] = '';
279 // À°·Á: msg, ²þ¹Ô¤ò¼è¤ê½ü¤¯
280 if (isset($vars['msg'])) {
281 $get['msg'] = $post['msg'] = $vars['msg'] = str_replace("\r", '', $vars['msg']);
284 // ¸åÊý¸ß´¹À (?md5=...)
285 if (isset($vars['md5']) && $vars['md5'] != '') {
286 $get['cmd'] = $post['cmd'] = $vars['cmd'] = 'md5';
290 if (isset($vars['tb_id']) && $vars['tb_id'] != '') {
291 $get['cmd'] = $post['cmd'] = $vars['cmd'] = 'tb';
294 // cmd¤âplugin¤â»ØÄꤵ¤ì¤Æ¤¤¤Ê¤¤¾ì¹ç¤Ï¡¢QUERY_STRING¤ò¥Ú¡¼¥¸Ì¾¤«InterWikiName¤Ç¤¢¤ë¤È¤ß¤Ê¤¹
295 if (! isset($vars['cmd']) && ! isset($vars['plugin'])) {
297 $get['cmd'] = $post['cmd'] = $vars['cmd'] = 'read';
299 if ($arg == '') $arg = $defaultpage;
300 $arg = rawurldecode($arg);
301 $arg = strip_bracket($arg);
302 $arg = input_filter($arg);
303 $get['page'] = $post['page'] = $vars['page'] = $arg;
306 // ÆþÎÏ¥Á¥§¥Ã¥¯: 'cmd=' prohibits nasty 'plugin='
307 if (isset($vars['cmd']) && isset($vars['plugin']))
308 unset($get['plugin'], $post['plugin'], $vars['plugin']);
311 /////////////////////////////////////////////////
312 // ½é´üÀßÄê($WikiName,$BracketName¤Ê¤É)
313 // $WikiName = '[A-Z][a-z]+(?:[A-Z][a-z]+)+';
314 // $WikiName = '\b[A-Z][a-z]+(?:[A-Z][a-z]+)+\b';
315 // $WikiName = '(?<![[:alnum:]])(?:[[:upper:]][[:lower:]]+){2,}(?![[:alnum:]])';
316 // $WikiName = '(?<!\w)(?:[A-Z][a-z]+){2,}(?!\w)';
318 // BugTrack/304»ÃÄêÂнè
319 $WikiName = '(?:[A-Z][a-z]+){2,}(?!\w)';
321 // $BracketName = ':?[^\s\]#&<>":]+:?';
322 $BracketName = '(?!\s):?[^\r\n\t\f\[\]<>#&":]+:?(?<!\s)';
325 $InterWikiName = "(\[\[)?((?:(?!\s|:|\]\]).)+):(.+)(?(1)\]\])";
328 $NotePattern = '/\(\(((?:(?>(?:(?!\(\()(?!\)\)(?:[^\)]|$)).)+)|(?R))*)\)\)/ex';
330 /////////////////////////////////////////////////
331 // ½é´üÀßÄê(¥æ¡¼¥¶ÄêµÁ¥ë¡¼¥ëÆɤ߹þ¤ß)
332 require(DATA_HOME . 'rules.ini.php');
334 /////////////////////////////////////////////////
335 // ½é´üÀßÄê(¤½¤Î¾¤Î¥°¥í¡¼¥Ð¥ëÊÑ¿ô)
338 $now = format_date(UTIME);
340 // skinÆâ¤ÇDTDÀë¸À¤òÀÚ¤êÂؤ¨¤ë¤Î¤Ë»ÈÍÑ¡£paint.inc.phpÂкö
341 $html_transitional = FALSE;
343 // TRUE :XHTML 1.0 Transitional
345 // ¥Õ¥§¥¤¥¹¥Þ¡¼¥¯¤ò$line_rules¤Ë²Ã¤¨¤ë
346 if ($usefacemark) { $line_rules += $facemark_rules; }
347 unset($facemark_rules);
349 // ¼ÂÂλ²¾È¥Ñ¥¿¡¼¥ó¤ª¤è¤Ó¥·¥¹¥Æ¥à¤Ç»ÈÍѤ¹¤ë¥Ñ¥¿¡¼¥ó¤ò$line_rules¤Ë²Ã¤¨¤ë
350 //$entity_pattern = '[a-zA-Z0-9]{2,8}';
351 $entity_pattern = trim(join('', file(CACHE_DIR . 'entities.dat')));
353 $line_rules = array_merge(array(
354 '&(#[0-9]+|#x[0-9a-f]+|' . $entity_pattern . ');' => '&$1;',
355 "\r" => "<br />\n", /* ¹ÔËö¤Ë¥Á¥ë¥À¤Ï²þ¹Ô */
356 '#related$' => '<del>#related</del>',
357 '^#contents$' => '<del>#contents</del>'