libs/ACTIONS.php

   1 <?php
   2 /*
   3  * Nucleus: PHP/MySQL Weblog CMS (http://nucleuscms.org/)
   4  * Copyright (C) 2002-2011 The Nucleus Group
   5  *
   6  * This program is free software; you can redistribute it and/or
   7  * modify it under the terms of the GNU General Public License
   8  * as published by the Free Software Foundation; either version 2
   9  * of the License, or (at your option) any later version.
  10  * (see nucleus/documentation/index.html#license for more info)
  11  */
  12 /**
  13  * This class contains the functions that get called by using
  14  * the special tags in the skins
  15  *
  16  * The allowed tags for a type of skinpart are defined by the
  17  * SKIN::getAllowedActionsForType($type) method
  18  *
  19  * @license http://nucleuscms.org/license.txt GNU General Public License
  20  * @copyright Copyright (C) 2002-2011 The Nucleus Group
  21  * @version $Id$
  22  * @version $NucleusJP: ACTIONS.php,v 1.8 2007/04/19 06:05:55 kimitake Exp $
  23  */
  24
  25 class ACTIONS extends BaseActions {
  26
  27         // part of the skin currently being parsed ('index', 'item', 'archive',
  28         // 'archivelist', 'member', 'search', 'error', 'imagepopup')
  29         var $skintype;
  30
  31         // contains an assoc array with parameters that need to be included when
  32         // generating links to items/archives/... (e.g. catid)
  33         var $linkparams;
  34
  35         // reference to the skin object for which a part is being parsed
  36         var $skin;
  37
  38         // used when including templated forms from the include/ dir. The $formdata var
  39         // contains the values to fill out in there (assoc array name -> value)
  40         var $formdata;
  41
  42         // filled out with the number of displayed items after calling one of the
  43         // (other)blog/(other)searchresults skinvars.
  44         var $amountfound;
  45
  46         /**
  47          * Constructor for a new ACTIONS object
  48          */
  49         function ACTIONS($type) {
  50                 // call constructor of superclass first
  51                 $this->BaseActions();
  52
  53                 $this->skintype = $type;
  54
  55                 global $catid;
  56                 if ($catid)
  57                         $this->linkparams = array('catid' => $catid);
  58         }
  59
  60         /**
  61          *  Set the skin
  62          */
  63         function setSkin(&$skin) {
  64                 $this->skin =& $skin;
  65         }
  66
  67         /**
  68          *  Set the parser
  69          */
  70         function setParser(&$parser) {
  71                 $this->parser =& $parser;
  72         }
  73
  74         /**
  75          *      Forms get parsedincluded now, using an extra <formdata> skinvar
  76         */
  77         function doForm($filename) {
  78                 global $DIR_NUCLEUS;
  79                 array_push($this->parser->actions,'formdata','text','callback','errordiv','ticket');
  80                 $oldIncludeMode = PARSER::getProperty('IncludeMode');
  81                 $oldIncludePrefix = PARSER::getProperty('IncludePrefix');
  82                 PARSER::setProperty('IncludeMode','normal');
  83                 PARSER::setProperty('IncludePrefix','');
  84                 $this->parse_parsedinclude($DIR_NUCLEUS . 'forms/' . $filename . '.template');
  85                 PARSER::setProperty('IncludeMode',$oldIncludeMode);
  86                 PARSER::setProperty('IncludePrefix',$oldIncludePrefix);
  87                 array_pop($this->parser->actions);              // errordiv
  88                 array_pop($this->parser->actions);              // callback
  89                 array_pop($this->parser->actions);              // text
  90                 array_pop($this->parser->actions);              // formdata
  91                 array_pop($this->parser->actions);              // ticket
  92         }
  93
  94         /**
  95          * Checks conditions for if statements
  96          *
  97          * @param string $field type of <%if%>
  98          * @param string $name property of field
  99          * @param string $value value of property
 100          */
 101         function checkCondition($field, $name='', $value = '') {
 102                 global $catid, $blog, $member, $itemidnext, $itemidprev, $manager, $archiveprevexists, $archivenextexists;
 103
 104                 $condition = 0;
 105                 switch($field) {
 106                         case 'category':
 107                                 $condition = ($blog && $this->_ifCategory($name,$value));
 108                                 break;
 109                         case 'blogsetting':
 110                                 $condition = ($blog && ($blog->getSetting($name) == $value));
 111                                 break;
 112                         case 'loggedin':
 113                                 $condition = $member->isLoggedIn();
 114                                 break;
 115                         case 'onteam':
 116                                 $condition = $member->isLoggedIn() && $this->_ifOnTeam($name);
 117                                 break;
 118                         case 'admin':
 119                                 $condition = $member->isLoggedIn() && $this->_ifAdmin($name);
 120                                 break;
 121                         case 'nextitem':
 122                                 $condition = ($itemidnext != '');
 123                                 break;
 124                         case 'previtem':
 125                                 $condition = ($itemidprev != '');
 126                                 break;
 127                         case 'archiveprevexists':
 128                                 $condition = ($archiveprevexists == true);
 129                                 break;
 130                         case 'archivenextexists':
 131                                 $condition = ($archivenextexists == true);
 132                                 break;
 133                         case 'skintype':
 134                                 $condition = ($name == $this->skintype);
 135                                 break;
 136                         case 'hasplugin':
 137                                 $condition = $this->_ifHasPlugin($name, $value);
 138                                 break;
 139                         default:
 140                                 $condition = $manager->pluginInstalled('NP_' . $field) && $this->_ifPlugin($field, $name, $value);
 141                                 break;
 142                 }
 143                 return $condition;
 144         }
 145
 146         /**
 147          *      hasplugin,PlugName
 148          *         -> checks if plugin exists
 149          *      hasplugin,PlugName,OptionName
 150          *         -> checks if the option OptionName from plugin PlugName is not set to 'no'
 151          *      hasplugin,PlugName,OptionName=value
 152          *         -> checks if the option OptionName from plugin PlugName is set to value
 153          */
 154         function _ifHasPlugin($name, $value) {
 155                 global $manager;
 156                 $condition = false;
 157                 // (pluginInstalled method won't write a message in the actionlog on failure)
 158                 if ($manager->pluginInstalled('NP_'.$name)) {
 159                         $plugin =& $manager->getPlugin('NP_' . $name);
 160                         if ($plugin != NULL) {
 161                                 if ($value == "") {
 162                                         $condition = true;
 163                                 } else {
 164                                         list($name2, $value2) = explode('=', $value, 2);
 165                                         if ($value2 == "" && $plugin->getOption($name2) != 'no') {
 166                                                 $condition = true;
 167                                         } else if ($plugin->getOption($name2) == $value2) {
 168                                                 $condition = true;
 169                                         }
 170                                 }
 171                         }
 172                 }
 173                 return $condition;
 174         }
 175
 176         /**
 177          * Checks if a plugin exists and call its doIf function
 178          */
 179         function _ifPlugin($name, $key = '', $value = '') {
 180                 global $manager;
 181
 182                 $plugin =& $manager->getPlugin('NP_' . $name);
 183                 if (!$plugin) return;
 184
 185                 $params = func_get_args();
 186                 array_shift($params);
 187
 188                 return call_user_func_array(array(&$plugin, 'doIf'), $params);
 189         }
 190
 191         /**
 192          *  Different checks for a category
 193          */
 194         function _ifCategory($name = '', $value='') {
 195                 global $blog, $catid;
 196
 197                 // when no parameter is defined, just check if a category is selected
 198                 if (($name != 'catname' && $name != 'catid') || ($value == ''))
 199                         return $blog->isValidCategory($catid);
 200
 201                 // check category name
 202                 if ($name == 'catname') {
 203                         $value = $blog->getCategoryIdFromName($value);
 204                         if ($value == $catid)
 205                                 return $blog->isValidCategory($catid);
 206                 }
 207
 208                 // check category id
 209                 if (($name == 'catid') && ($value == $catid))
 210                         return $blog->isValidCategory($catid);
 211
 212                 return false;
 213         }
 214
 215         /**
 216          *  Checks if a member is on the team of a blog and return his rights
 217          */
 218         function _ifOnTeam($blogName = '') {
 219                 global $blog, $member, $manager;
 220
 221                 // when no blog found
 222                 if (($blogName == '') && (!is_object($blog)))
 223                         return 0;
 224
 225                 // explicit blog selection
 226                 if ($blogName != '')
 227                         $blogid = getBlogIDFromName($blogName);
 228
 229                 if (($blogName == '') || !$manager->existsBlogID($blogid))
 230                         // use current blog
 231                         $blogid = $blog->getID();
 232
 233                 return $member->teamRights($blogid);
 234         }
 235
 236         /**
 237          *  Checks if a member is admin of a blog
 238          */
 239         function _ifAdmin($blogName = '') {
 240                 global $blog, $member, $manager;
 241
 242                 // when no blog found
 243                 if (($blogName == '') && (!is_object($blog)))
 244                         return 0;
 245
 246                 // explicit blog selection
 247                 if ($blogName != '')
 248                         $blogid = getBlogIDFromName($blogName);
 249
 250                 if (($blogName == '') || !$manager->existsBlogID($blogid))
 251                         // use current blog
 252                         $blogid = $blog->getID();
 253
 254                 return $member->blogAdminRights($blogid);
 255         }
 256
 257         /**
 258          * returns either
 259          *              - a raw link (html/xml encoded) when no linktext is provided
 260          *              - a (x)html <a href... link when a text is present (text htmlencoded)
 261          */
 262         function _link($url, $linktext = '')
 263         {
 264                 $u = htmlspecialchars($url);
 265                 $u = preg_replace("/&amp;amp;/",'&amp;',$u); // fix URLs that already had encoded ampersands
 266                 if ($linktext != '')
 267                         $l = '<a href="' . $u .'">'.htmlspecialchars($linktext).'</a>';
 268                 else
 269                         $l = $u;
 270                 return $l;
 271         }
 272
 273         /**
 274          * Outputs a next/prev link
 275          *
 276          * @param $maxresults
 277          *              The maximum amount of items shown per page (e.g. 10)
 278          * @param $startpos
 279          *              Current start position (requestVar('startpos'))
 280          * @param $direction
 281          *              either 'prev' or 'next'
 282          * @param $linktext
 283          *              When present, the output will be a full <a href...> link. When empty,
 284          *              only a raw link will be outputted
 285          */
 286         function _searchlink($maxresults, $startpos, $direction, $linktext = '', $recount = '') {
 287                 global $CONF, $blog, $query, $amount;
 288                 // TODO: Move request uri to linkparams. this is ugly. sorry for that.
 289                 $startpos       = intval($startpos);            // will be 0 when empty.
 290                 $path           = $parsed['path'];
 291                 $parsed         = parse_url(serverVar('REQUEST_URI'));
 292                 $parsed         = $parsed['query'];
 293                 $url                    = '';
 294
 295                 switch ($direction) {
 296                         case 'prev':
 297                                 if ( intval($startpos) - intval($maxresults) >= 0) {
 298                                         $startpos       = intval($startpos) - intval($maxresults);
 299                                         //$url          = $CONF['SearchURL'].'?'.alterQueryStr($parsed,'startpos',$startpos);
 300                                         switch ($this->skintype)
 301                                         {
 302                                                 case 'index':
 303                                                         $url = $path;
 304                                                         break;
 305                                                 case 'search':
 306                                                         $url = $CONF['SearchURL'];
 307                                                         break;
 308                                         }
 309                                         $url .= '?'.alterQueryStr($parsed,'startpos',$startpos);
 310                                 }
 311                                 break;
 312                         case 'next':
 313                                 global $navigationItems;
 314                                 if (!isset($navigationItems)) $navigationItems = 0;
 315
 316                                 if ($recount)
 317                                         $iAmountOnPage = 0;
 318                                 else
 319                                         $iAmountOnPage = $this->amountfound;
 320
 321                                 if (intval($navigationItems) > 0) {
 322                                         $iAmountOnPage = intval($navigationItems) - intval($startpos);
 323                                 }
 324                                 elseif ($iAmountOnPage == 0)
 325                                 {
 326                                         // [%nextlink%] or [%prevlink%] probably called before [%blog%] or [%searchresults%]
 327                                         // try a count query
 328                                         switch ($this->skintype)
 329                                         {
 330                                                 case 'index':
 331                                                         $sqlquery = $blog->getSqlBlog('', 'count');
 332                                                         break;
 333                                                 case 'search':
 334                                                         $unused_highlight = '';
 335                                                         $sqlquery = $blog->getSqlSearch($query, $amount, $unused_highlight, 'count');
 336                                                         $url = $CONF['SearchURL'];
 337                                                         break;
 338                                         }
 339                                         if ($sqlquery)
 340                                                 $iAmountOnPage = intval(quickQuery($sqlquery)) - intval($startpos);
 341                                 }
 342                                 if (intval($iAmountOnPage) >= intval($maxresults)) {
 343                                         $startpos       = intval($startpos) + intval($maxresults);
 344                                         //$url          = $CONF['SearchURL'].'?'.alterQueryStr($parsed,'startpos',$startpos);
 345                                         $url            .= '?'.alterQueryStr($parsed,'startpos',$startpos);
 346                                 }
 347                                 else $url       = '';
 348                                 break;
 349                         default:
 350                                 break;
 351                 } // switch($direction)
 352
 353                 if ($url != '')
 354                         echo $this->_link($url, $linktext);
 355         }
 356
 357         /**
 358          *  Creates an item link and if no id is given a todaylink
 359          */
 360         function _itemlink($id, $linktext = '') {
 361                 global $CONF;
 362                 if ($id)
 363                         echo $this->_link(createItemLink($id, $this->linkparams), $linktext);
 364                 else
 365                         $this->parse_todaylink($linktext);
 366         }
 367
 368         /**
 369          *  Creates an archive link and if no id is given a todaylink
 370          */
 371         function _archivelink($id, $linktext = '') {
 372                 global $CONF, $blog;
 373                 if ($id)
 374                         echo $this->_link(createArchiveLink($blog->getID(), $id, $this->linkparams), $linktext);
 375                 else
 376                         $this->parse_todaylink($linktext);
 377         }
 378
 379         /**
 380           * Helper function that sets the category that a blog will need to use
 381           *
 382           * @param $blog
 383           *             An object of the blog class, passed by reference (we want to make changes to it)
 384           * @param $catname
 385           *             The name of the category to use
 386           */
 387         function _setBlogCategory(&$blog, $catname) {
 388                 global $catid;
 389                 if ($catname != '')
 390                         $blog->setSelectedCategoryByName($catname);
 391                 else
 392                         $blog->setSelectedCategory($catid);
 393         }
 394
 395         /**
 396          *  Notifies the Manager that a PreBlogContent event occurs
 397          */
 398         function _preBlogContent($type, &$blog) {
 399                 global $manager;
 400                 $manager->notify('PreBlogContent',array('blog' => &$blog, 'type' => $type));
 401         }
 402
 403         /**
 404          *  Notifies the Manager that a PostBlogContent event occurs
 405          */
 406         function _postBlogContent($type, &$blog) {
 407                 global $manager;
 408                 $manager->notify('PostBlogContent',array('blog' => &$blog, 'type' => $type));
 409         }
 410
 411         /**
 412          * Parse skinvar additemform
 413          */
 414         function parse_additemform() {
 415                 global $blog, $CONF;
 416                 $this->formdata = array(
 417                         'adminurl' => htmlspecialchars($CONF['AdminURL'],ENT_QUOTES),
 418                         'catid' => $blog->getDefaultCategory()
 419                 );
 420                 $blog->InsertJavaScriptInfo();
 421                 $this->doForm('additemform');
 422         }
 423
 424         /**
 425          * Parse skinvar addlink
 426          * A Link that allows to open a bookmarklet to add an item
 427          */
 428         function parse_addlink() {
 429                 global $CONF, $member, $blog;
 430                         echo $CONF['AdminURL'].'bookmarklet.php?blogid='.$blog->blogid;
 431         }
 432
 433         /**
 434          * Parse skinvar addpopupcode
 435          * Code that opens a bookmarklet in an popup window
 436          */
 437         function parse_addpopupcode() {
 438                 echo "if (event &amp;&amp; event.preventDefault) event.preventDefault();winbm=window.open(this.href,'nucleusbm','scrollbars=no,width=710,height=550,left=10,top=10,status=no,resizable=yes');winbm.focus();return false;";
 439         }
 440
 441         /**
 442          * Parse skinvar adminurl
 443          * (shortcut for admin url)
 444          */
 445         function parse_adminurl() {
 446                 $this->parse_sitevar('adminurl');
 447         }
 448
 449         /**
 450          * Parse skinvar archive
 451          */
 452         function parse_archive($template, $category = '') {
 453                 global $blog, $archive;
 454                 // can be used with either yyyy-mm or yyyy-mm-dd
 455                 sscanf($archive,'%d-%d-%d',$y,$m,$d);
 456                 $this->_setBlogCategory($blog, $category);
 457                 $this->_preBlogContent('achive',$blog);
 458                 $blog->showArchive($template, $y, $m, $d);
 459                 $this->_postBlogContent('achive',$blog);
 460
 461         }
 462
 463         /**
 464           * %archivedate(locale,date format)%
 465           */
 466         function parse_archivedate($locale = '-def-') {
 467                 global $archive;
 468
 469                 if ($locale == '-def-')
 470                         setlocale(LC_TIME,$template['LOCALE']);
 471                 else
 472                         setlocale(LC_TIME,$locale);
 473
 474                 // get archive date
 475                 sscanf($archive,'%d-%d-%d',$y,$m,$d);
 476
 477                 // get format
 478                 $args = func_get_args();
 479                 // format can be spread over multiple parameters
 480                 if (sizeof($args) > 1) {
 481                         // take away locale
 482                         array_shift($args);
 483                         // implode
 484                         $format=implode(',',$args);
 485                 } elseif ($d == 0 && $m !=0) {
 486                         $format = '%B %Y';
 487                 } elseif ($m == 0) {
 488                         $format = '%Y';
 489                 } else {
 490                         $format = '%d %B %Y';
 491                 }
 492
 493                 echo strftimejp($format,mktime(0,0,0,$m?$m:1,$d?$d:1,$y));
 494         }
 495
 496         /**
 497          *  Parse skinvar archivedaylist
 498          */
 499         function parse_archivedaylist($template, $category = 'all', $limit = 0) {
 500                 global $blog;
 501                 if ($category == 'all') $category = '';
 502                 $this->_preBlogContent('archivelist',$blog);
 503                 $this->_setBlogCategory($blog, $category);
 504                 $blog->showArchiveList($template, 'day', $limit);
 505                 $this->_postBlogContent('archivelist',$blog);
 506         }
 507
 508         /**
 509          *      A link to the archives for the current blog (or for default blog)
 510          */
 511         function parse_archivelink($linktext = '') {
 512                 global $blog, $CONF;
 513                 if ($blog)
 514                         echo $this->_link(createArchiveListLink($blog->getID(),$this->linkparams), $linktext);
 515                 else
 516                         echo $this->_link(createArchiveListLink(), $linktext);
 517         }
 518
 519         function parse_archivelist($template, $category = 'all', $limit = 0) {
 520                 global $blog;
 521                 if ($category == 'all') $category = '';
 522                 $this->_preBlogContent('archivelist',$blog);
 523                 $this->_setBlogCategory($blog, $category);
 524                 $blog->showArchiveList($template, 'month', $limit);
 525                 $this->_postBlogContent('archivelist',$blog);
 526         }
 527
 528         function parse_archiveyearlist($template, $category = 'all', $limit = 0) {
 529                 global $blog;
 530                 if ($category == 'all') $category = '';
 531                 $this->_preBlogContent('archivelist',$blog);
 532                 $this->_setBlogCategory($blog, $category);
 533                 $blog->showArchiveList($template, 'year', $limit);
 534                 $this->_postBlogContent('archivelist',$blog);
 535         }
 536
 537         /**
 538          * Parse skinvar archivetype
 539          */
 540         function parse_archivetype() {
 541                 global $archivetype;
 542                 echo $archivetype;
 543         }
 544
 545         /**
 546          * Parse skinvar blog
 547          */
 548         function parse_blog($template, $amount = 10, $category = '') {
 549                 global $blog, $startpos;
 550
 551                 list($limit, $offset) = sscanf($amount, '%d(%d)');
 552                 $this->_setBlogCategory($blog, $category);
 553                 $this->_preBlogContent('blog',$blog);
 554                 $this->amountfound = $blog->readLog($template, $limit, $offset, $startpos);
 555                 $this->_postBlogContent('blog',$blog);
 556         }
 557
 558         /*
 559         *       Parse skinvar bloglist
 560         *       Shows a list of all blogs
 561         *       bnametype: whether 'name' or 'shortname' is used for the link text
 562         *       orderby: order criteria
 563         *       direction: order ascending or descending
 564         */
 565         function parse_bloglist($template, $bnametype = '', $orderby='number', $direction='asc') {
 566                 BLOG::showBlogList($template, $bnametype, $orderby, $direction);
 567         }
 568
 569         /**
 570          * Parse skinvar blogsetting
 571          */
 572         function parse_blogsetting($which) {
 573                 global $blog;
 574                 switch($which) {
 575                         case 'id':
 576                                 echo htmlspecialchars($blog->getID(),ENT_QUOTES);
 577                                 break;
 578                         case 'url':
 579                                 echo htmlspecialchars($blog->getURL(),ENT_QUOTES);
 580                                 break;
 581                         case 'name':
 582                                 echo htmlspecialchars($blog->getName(),ENT_QUOTES);
 583                                 break;
 584                         case 'desc':
 585                                 echo htmlspecialchars($blog->getDescription(),ENT_QUOTES);
 586                                 break;
 587                         case 'short':
 588                                 echo htmlspecialchars($blog->getShortName(),ENT_QUOTES);
 589                                 break;
 590                 }
 591         }
 592
 593         /**
 594          * Parse callback
 595          */
 596         function parse_callback($eventName, $type)
 597         {
 598                 global $manager;
 599                 $manager->notify($eventName, array('type' => $type));
 600         }
 601
 602         /**
 603          * Parse skinvar category
 604          */
 605         function parse_category($type = 'name') {
 606                 global $catid, $blog;
 607                 if (!$blog->isValidCategory($catid))
 608                         return;
 609
 610                 switch($type) {
 611                         case 'name':
 612                                 echo $blog->getCategoryName($catid);
 613                                 break;
 614                         case 'desc':
 615                                 echo $blog->getCategoryDesc($catid);
 616                                 break;
 617                         case 'id':
 618                                 echo $catid;
 619                                 break;
 620                 }
 621         }
 622
 623         /**
 624          * Parse categorylist
 625          */
 626         function parse_categorylist($template, $blogname = '') {
 627                 global $blog, $manager;
 628
 629                 // when no blog found
 630                 if (($blogName == '') && (!is_object($blog)))
 631                         return 0;
 632
 633                 if ($blogname == '') {
 634                         $this->_preBlogContent('categorylist',$blog);
 635                         $blog->showCategoryList($template);
 636                         $this->_postBlogContent('categorylist',$blog);
 637                 } else {
 638                         $b =& $manager->getBlog(getBlogIDFromName($blogname));
 639                         $this->_preBlogContent('categorylist',$b);
 640                         $b->showCategoryList($template);
 641                         $this->_postBlogContent('categorylist',$b);
 642                 }
 643         }
 644
 645         /**
 646          * Parse skinvar charset
 647          */
 648         function parse_charset() {
 649                 echo _CHARSET;
 650         }
 651
 652         /**
 653          * Parse skinvar commentform
 654          */
 655         function parse_commentform($destinationurl = '') {
 656                 global $blog, $itemid, $member, $CONF, $manager, $DIR_LIBS, $errormessage;
 657
 658                 // warn when trying to provide a actionurl (used to be a parameter in Nucleus <2.0)
 659                 if (stristr($destinationurl, 'action.php')) {
 660                         $args = func_get_args();
 661                         $destinationurl = $args[1];
 662                         ACTIONLOG::add(WARNING,_ACTIONURL_NOTLONGER_PARAMATER);
 663                 }
 664
 665                 $actionurl = $CONF['ActionURL'];
 666
 667                 // if item is closed, show message and do nothing
 668                 $item =& $manager->getItem($itemid,0,0);
 669                 if ($item['closed'] || !$blog->commentsEnabled()) {
 670                         $this->doForm('commentform-closed');
 671                         return;
 672                 }
 673
 674                 if (!$blog->isPublic() && !$member->isLoggedIn()) {
 675                         $this->doForm('commentform-closedtopublic');
 676                         return;
 677                 }
 678
 679                 if (!$destinationurl)
 680                 {
 681                         $destinationurl = createLink(
 682                                 'item',
 683                                 array(
 684                                         'itemid' => $itemid,
 685                                         'title' => $item['title'],
 686                                         'timestamp' => $item['timestamp'],
 687                                         'extra' => $this->linkparams
 688                                 )
 689                         );
 690
 691                         // note: createLink returns an HTML encoded URL
 692                 } else {
 693                         // HTML encode URL
 694                         $destinationurl = htmlspecialchars($destinationurl,ENT_QUOTES);
 695                 }
 696
 697                 // values to prefill
 698                 $user = cookieVar($CONF['CookiePrefix'] .'comment_user');
 699                 if (!$user) $user = postVar('user');
 700                 $userid = cookieVar($CONF['CookiePrefix'] .'comment_userid');
 701                 if (!$userid) $userid = postVar('userid');
 702                 $email = cookieVar($CONF['CookiePrefix'] .'comment_email');
 703                 if (!$email) {
 704                         $email = postVar('email');
 705                 }
 706                 $body = postVar('body');
 707
 708                 $this->formdata = array(
 709                         'destinationurl' => $destinationurl,    // url is already HTML encoded
 710                         'actionurl' => htmlspecialchars($actionurl,ENT_QUOTES),
 711                         'itemid' => $itemid,
 712                         'user' => htmlspecialchars($user,ENT_QUOTES),
 713                         'userid' => htmlspecialchars($userid,ENT_QUOTES),
 714                         'email' => htmlspecialchars($email,ENT_QUOTES),
 715                         'body' => htmlspecialchars($body,ENT_QUOTES),
 716                         'membername' => $member->getDisplayName(),
 717                         'rememberchecked' => cookieVar($CONF['CookiePrefix'] .'comment_user')?'checked="checked"':''
 718                 );
 719
 720                 if (!$member->isLoggedIn()) {
 721                         $this->doForm('commentform-notloggedin');
 722                 } else {
 723                         $this->doForm('commentform-loggedin');
 724                 }
 725         }
 726
 727         /**
 728          * Parse skinvar comments
 729          * include comments for one item
 730          */
 731         function parse_comments($template) {
 732                 global $itemid, $manager, $blog, $highlight;
 733                 $template =& $manager->getTemplate($template);
 734
 735                 // create parser object & action handler
 736                 $actions =& new ITEMACTIONS($blog);
 737                 $parser =& new PARSER($actions->getDefinedActions(),$actions);
 738                 $actions->setTemplate($template);
 739                 $actions->setParser($parser);
 740                 $item = ITEM::getitem($itemid, 0, 0);
 741                 $actions->setCurrentItem($item);
 742
 743                 $comments =& new COMMENTS($itemid);
 744                 $comments->setItemActions($actions);
 745                 $comments->showComments($template, -1, 1, $highlight);  // shows ALL comments
 746         }
 747
 748         /**
 749          * Parse errordiv
 750          */
 751         function parse_errordiv() {
 752                 global $errormessage;
 753                 if ($errormessage)
 754                         echo '<div class="error">', htmlspecialchars($errormessage),'</div>';
 755         }
 756
 757         /**
 758          * Parse skinvar errormessage
 759          */
 760         function parse_errormessage() {
 761                 global $errormessage;
 762                 echo $errormessage;
 763         }
 764
 765         /**
 766          * Parse formdata
 767          */
 768         function parse_formdata($what) {
 769                 echo $this->formdata[$what];
 770         }
 771
 772         /**
 773          * Parse ifcat
 774          */
 775         function parse_ifcat($text = '') {
 776                 if ($text == '') {
 777                         // new behaviour
 778                         $this->parse_if('category');
 779                 } else {
 780                         // old behaviour
 781                         global $catid, $blog;
 782                         if ($blog->isValidCategory($catid))
 783                                 echo $text;
 784                 }
 785         }
 786
 787         /**
 788          * Parse skinvar image
 789          */
 790         function parse_image($what = 'imgtag') {
 791                 global $CONF;
 792
 793                 $imagetext      = htmlspecialchars(requestVar('imagetext'));
 794                 $imagepopup = requestVar('imagepopup');
 795                 $width          = intRequestVar('width');
 796                 $height         = intRequestVar('height');
 797                 $fullurl        = htmlspecialchars($CONF['MediaURL'] . $imagepopup);
 798
 799                 switch($what)
 800                 {
 801                         case 'url':
 802                                 echo $fullurl;
 803                                 break;
 804                         case 'width':
 805                                 echo $width;
 806                                 break;
 807                         case 'height':
 808                                 echo $height;
 809                                 break;
 810                         case 'caption':
 811                         case 'text':
 812                                 echo $imagetext;
 813                                 break;
 814                         case 'imgtag':
 815                         default:
 816                                 echo "<img src=\"$fullurl\" width=\"$width\" height=\"$height\" alt=\"$imagetext\" title=\"$imagetext\" />";
 817                                 break;
 818                 }
 819         }
 820
 821         /**
 822          * Parse skinvar imagetext
 823          */
 824         function parse_imagetext() {
 825                 echo htmlspecialchars(requestVar('imagetext'),ENT_QUOTES);
 826         }
 827
 828         /**
 829          * Parse skinvar item
 830          * include one item (no comments)
 831          */
 832         function parse_item($template) {
 833                 global $blog, $itemid, $highlight;
 834                 $this->_setBlogCategory($blog, '');     // need this to select default category
 835                 $this->_preBlogContent('item',$blog);
 836                 $r = $blog->showOneitem($itemid, $template, $highlight);
 837                 if ($r == 0)
 838                         echo _ERROR_NOSUCHITEM;
 839                 $this->_postBlogContent('item',$blog);
 840         }
 841
 842         /**
 843          * Parse skinvar itemid
 844          */
 845         function parse_itemid() {
 846                 global $itemid;
 847                 echo $itemid;
 848         }
 849
 850         /**
 851          * Parse skinvar itemlink
 852          */
 853         function parse_itemlink($linktext = '') {
 854                 global $itemid;
 855                 $this->_itemlink($itemid, $linktext);
 856         }
 857
 858         /**
 859          * Parse itemtitle
 860          */
 861         function parse_itemtitle($format = '') {
 862                 global $manager, $itemid;
 863                 $item =& $manager->getItem($itemid,0,0);
 864
 865                 switch ($format) {
 866                         case 'xml':
 867                                 echo stringToXML ($item['title']);
 868                                 break;
 869                         case 'attribute':
 870                                 echo stringToAttribute ($item['title']);
 871                                 break;
 872                         case 'raw':
 873                                 echo $item['title'];
 874                                 break;
 875                         default:
 876                                 echo htmlspecialchars(strip_tags($item['title']),ENT_QUOTES);
 877                                 break;
 878                 }
 879         }
 880
 881         /**
 882          * Parse skinvar loginform
 883          */
 884         function parse_loginform() {
 885                 global $member, $CONF;
 886                 if (!$member->isLoggedIn()) {
 887                         $filename = 'loginform-notloggedin';
 888                         $this->formdata = array();
 889                 } else {
 890                         $filename = 'loginform-loggedin';
 891                         $this->formdata = array(
 892                                 'membername' => $member->getDisplayName(),
 893                         );
 894                 }
 895                 $this->doForm($filename);
 896         }
 897
 898         /**
 899          * Parse skinvar member
 900          * (includes a member info thingie)
 901          */
 902         function parse_member($what) {
 903                 global $memberinfo, $member, $CONF;
 904
 905                 // 1. only allow the member-details-page specific variables on member pages
 906                 if ($this->skintype == 'member') {
 907
 908                         switch($what) {
 909                                 case 'name':
 910                                         echo htmlspecialchars($memberinfo->getDisplayName(),ENT_QUOTES);
 911                                         break;
 912                                 case 'realname':
 913                                         echo htmlspecialchars($memberinfo->getRealName(),ENT_QUOTES);
 914                                         break;
 915                                 case 'notes':
 916                                         echo htmlspecialchars($memberinfo->getNotes(),ENT_QUOTES);
 917                                         break;
 918                                 case 'url':
 919                                         echo htmlspecialchars($memberinfo->getURL(),ENT_QUOTES);
 920                                         break;
 921                                 case 'email':
 922                                         echo htmlspecialchars($memberinfo->getEmail(),ENT_QUOTES);
 923                                         break;
 924                                 case 'id':
 925                                         echo htmlspecialchars($memberinfo->getID(),ENT_QUOTES);
 926                                         break;
 927                         }
 928                 }
 929
 930                 // 2. the next bunch of options is available everywhere, as long as the user is logged in
 931                 if ($member->isLoggedIn())
 932                 {
 933                         switch($what) {
 934                                 case 'yourname':
 935                                         echo $member->getDisplayName();
 936                                         break;
 937                                 case 'yourrealname':
 938                                         echo $member->getRealName();
 939                                         break;
 940                                 case 'yournotes':
 941                                         echo $member->getNotes();
 942                                         break;
 943                                 case 'yoururl':
 944                                         echo $member->getURL();
 945                                         break;
 946                                 case 'youremail':
 947                                         echo $member->getEmail();
 948                                         break;
 949                                 case 'yourid':
 950                                         echo $member->getID();
 951                                         break;
 952                                 case 'yourprofileurl':
 953                                         if ($CONF['URLMode'] == 'pathinfo')
 954                                                 echo createMemberLink($member->getID());
 955                                         else
 956                                                 echo $CONF['IndexURL'] . createMemberLink($member->getID());
 957                                         break;
 958                         }
 959                 }
 960         }
 961
 962         /**
 963          * Parse skinvar membermailform
 964          */
 965         function parse_membermailform($rows = 10, $cols = 40, $desturl = '') {
 966                 global $member, $CONF, $memberid;
 967
 968                 if ($desturl == '') {
 969                         if ($CONF['URLMode'] == 'pathinfo')
 970                                 $desturl = createMemberLink($memberid);
 971                         else
 972                                 $desturl = $CONF['IndexURL'] . createMemberLink($memberid);
 973                 }
 974
 975                 $message = postVar('message');
 976                 $frommail = postVar('frommail');
 977
 978                 $this->formdata = array(
 979                         'url' => htmlspecialchars($desturl),
 980                         'actionurl' => htmlspecialchars($CONF['ActionURL'],ENT_QUOTES),
 981                         'memberid' => $memberid,
 982                         'rows' => $rows,
 983                         'cols' => $cols,
 984                         'message' => htmlspecialchars($message,ENT_QUOTES),
 985                         'frommail' => htmlspecialchars($frommail,ENT_QUOTES)
 986                 );
 987                 if ($member->isLoggedIn()) {
 988                         $this->doForm('membermailform-loggedin');
 989                 } else if ($CONF['NonmemberMail']) {
 990                         $this->doForm('membermailform-notloggedin');
 991                 } else {
 992                         $this->doForm('membermailform-disallowed');
 993                 }
 994
 995         }
 996
 997         /**
 998          * Parse skinvar nextarchive
 999          */
1000         function parse_nextarchive() {
1001                 global $archivenext;
1002                 echo $archivenext;
1003         }
1004
1005         /**
1006          * Parse skinvar nextitem
1007          * (include itemid of next item)
1008          */
1009         function parse_nextitem() {
1010                 global $itemidnext;
1011                 if (isset($itemidnext)) echo (int)$itemidnext;
1012         }
1013
1014         /**
1015          * Parse skinvar nextitemtitle
1016          * (include itemtitle of next item)
1017          */
1018         function parse_nextitemtitle($format = '') {
1019                 global $itemtitlenext;
1020
1021                 switch ($format) {
1022                         case 'xml':
1023                                 echo stringToXML ($itemtitlenext);
1024                                 break;
1025                         case 'attribute':
1026                                 echo stringToAttribute ($itemtitlenext);
1027                                 break;
1028                         case 'raw':
1029                                 echo $itemtitlenext;
1030                                 break;
1031                         default:
1032                                 echo htmlspecialchars($itemtitlenext,ENT_QUOTES);
1033                                 break;
1034                 }
1035         }
1036
1037         /**
1038          * Parse skinvar nextlink
1039          */
1040         function parse_nextlink($linktext = '', $amount = 10, $recount = '') {
1041                 global $itemidnext, $archivenext, $startpos;
1042                 if ($this->skintype == 'item')
1043                         $this->_itemlink($itemidnext, $linktext);
1044                 else if ($this->skintype == 'search' || $this->skintype == 'index')
1045                         $this->_searchlink($amount, $startpos, 'next', $linktext, $recount);
1046                 else
1047                         $this->_archivelink($archivenext, $linktext);
1048         }
1049
1050         /**
1051          * Parse skinvar nucleusbutton
1052          */
1053         function parse_nucleusbutton($imgurl = '',
1054                                                                  $imgwidth = '85',
1055                                                                  $imgheight = '31') {
1056                 global $CONF;
1057                 if ($imgurl == '') {
1058                         $imgurl = $CONF['AdminURL'] . 'nucleus.gif';
1059                 } else if (PARSER::getProperty('IncludeMode') == 'skindir'){
1060                         // when skindit IncludeMode is used: start from skindir
1061                         $imgurl = $CONF['SkinsURL'] . PARSER::getProperty('IncludePrefix') . $imgurl;
1062                 }
1063
1064                 $this->formdata = array(
1065                         'imgurl' => $imgurl,
1066                         'imgwidth' => $imgwidth,
1067                         'imgheight' => $imgheight,
1068                 );
1069                 $this->doForm('nucleusbutton');
1070         }
1071
1072         /**
1073          * Parse skinvar otherarchive
1074          */
1075         function parse_otherarchive($blogname, $template, $category = '') {
1076                 global $archive, $manager;
1077                 sscanf($archive,'%d-%d-%d',$y,$m,$d);
1078                 $b =& $manager->getBlog(getBlogIDFromName($blogname));
1079                 $this->_setBlogCategory($b, $category);
1080                 $this->_preBlogContent('otherachive',$b);
1081                 $b->showArchive($template, $y, $m, $d);
1082                 $this->_postBlogContent('otherachive',$b);
1083         }
1084
1085         /**
1086          * Parse skinvar otherarchivedaylist
1087          */
1088         function parse_otherarchivedaylist($blogname, $template, $category = 'all', $limit = 0) {
1089                 global $manager;
1090                 if ($category == 'all') $category = '';
1091                 $b =& $manager->getBlog(getBlogIDFromName($blogname));
1092                 $this->_setBlogCategory($b, $category);
1093                 $this->_preBlogContent('otherarchivelist',$b);
1094                 $b->showArchiveList($template, 'day', $limit);
1095                 $this->_postBlogContent('otherarchivelist',$b);
1096         }
1097
1098         /**
1099          * Parse skinvar otherarchivelist
1100          */
1101         function parse_otherarchivelist($blogname, $template, $category = 'all', $limit = 0) {
1102                 global $manager;
1103                 if ($category == 'all') $category = '';
1104                 $b =& $manager->getBlog(getBlogIDFromName($blogname));
1105                 $this->_setBlogCategory($b, $category);
1106                 $this->_preBlogContent('otherarchivelist',$b);
1107                 $b->showArchiveList($template, 'month', $limit);
1108                 $this->_postBlogContent('otherarchivelist',$b);
1109         }
1110
1111         /**
1112          * Parse skinvar otherarchiveyearlist
1113          */
1114         function parse_otherarchiveyearlist($blogname, $template, $category = 'all', $limit = 0) {
1115                 global $manager;
1116                 if ($category == 'all') $category = '';
1117                 $b =& $manager->getBlog(getBlogIDFromName($blogname));
1118                 $this->_setBlogCategory($b, $category);
1119                 $this->_preBlogContent('otherarchivelist',$b);
1120                 $b->showArchiveList($template, 'year', $limit);
1121                 $this->_postBlogContent('otherarchivelist',$b);
1122         }
1123
1124         /**
1125          * Parse skinvar otherblog
1126          */
1127         function parse_otherblog($blogname, $template, $amount = 10, $category = '') {
1128                 global $manager;
1129
1130                 list($limit, $offset) = sscanf($amount, '%d(%d)');
1131
1132                 $b =& $manager->getBlog(getBlogIDFromName($blogname));
1133                 $this->_setBlogCategory($b, $category);
1134                 $this->_preBlogContent('otherblog',$b);
1135                 $this->amountfound = $b->readLog($template, $limit, $offset);
1136                 $this->_postBlogContent('otherblog',$b);
1137         }
1138
1139         /**
1140          * Parse skinvar othersearchresults
1141          */
1142         function parse_othersearchresults($blogname, $template, $maxresults = 50) {
1143                 global $query, $amount, $manager, $startpos;
1144                 $b =& $manager->getBlog(getBlogIDFromName($blogname));
1145                 $this->_setBlogCategory($b, '');        // need this to select default category
1146                 $this->_preBlogContent('othersearchresults',$b);
1147                 $b->search($query, $template, $amount, $maxresults, $startpos);
1148                 $this->_postBlogContent('othersearchresults',$b);
1149         }
1150
1151         /**
1152           * Executes a plugin skinvar
1153           *
1154           * @param pluginName name of plugin (without the NP_)
1155           *
1156           * extra parameters can be added
1157           */
1158         function parse_plugin($pluginName) {
1159                 global $manager;
1160
1161                 // should be already tested from the parser (PARSER.php)
1162                 // only continue when the plugin is really installed
1163                 /*if (!$manager->pluginInstalled('NP_' . $pluginName))
1164                         return;*/
1165
1166                 $plugin =& $manager->getPlugin('NP_' . $pluginName);
1167                 if (!$plugin) return;
1168
1169                 // get arguments
1170                 $params = func_get_args();
1171
1172                 // remove plugin name
1173                 array_shift($params);
1174
1175                 // add skin type on front
1176                 array_unshift($params, $this->skintype);
1177
1178                 call_user_func_array(array(&$plugin,'doSkinVar'), $params);
1179         }
1180
1181         /**
1182          * Parse skinvar prevarchive
1183          */
1184         function parse_prevarchive() {
1185                 global $archiveprev;
1186                 echo $archiveprev;
1187         }
1188
1189         /**
1190          * Parse skinvar preview
1191          */
1192         function parse_preview($template) {
1193                 global $blog, $CONF, $manager;
1194
1195                 $template =& $manager->getTemplate($template);
1196                 $row['body'] = '<span id="prevbody"></span>';
1197                 $row['title'] = '<span id="prevtitle"></span>';
1198                 $row['more'] = '<span id="prevmore"></span>';
1199                 $row['itemlink'] = '';
1200                 $row['itemid'] = 0; $row['blogid'] = $blog->getID();
1201                 echo TEMPLATE::fill($template['ITEM_HEADER'],$row);
1202                 echo TEMPLATE::fill($template['ITEM'],$row);
1203                 echo TEMPLATE::fill($template['ITEM_FOOTER'],$row);
1204         }
1205
1206         /*
1207          * Parse skinvar previtem
1208          * (include itemid of prev item)
1209          */
1210         function parse_previtem() {
1211                 global $itemidprev;
1212                 if (isset($itemidprev)) echo (int)$itemidprev;
1213         }
1214
1215         /**
1216          * Parse skinvar previtemtitle
1217          * (include itemtitle of prev item)
1218          */
1219         function parse_previtemtitle($format = '') {
1220                 global $itemtitleprev;
1221
1222                 switch ($format) {
1223                         case 'xml':
1224                                 echo stringToXML ($itemtitleprev);
1225                                 break;
1226                         case 'attribute':
1227                                 echo stringToAttribute ($itemtitleprev);
1228                                 break;
1229                         case 'raw':
1230                                 echo $itemtitleprev;
1231                                 break;
1232                         default:
1233                                 echo htmlspecialchars($itemtitleprev,ENT_QUOTES);
1234                                 break;
1235                 }
1236         }
1237
1238         /**
1239          * Parse skinvar prevlink
1240          */
1241         function parse_prevlink($linktext = '', $amount = 10) {
1242                 global $itemidprev, $archiveprev, $startpos;
1243
1244                 if ($this->skintype == 'item')
1245                         $this->_itemlink($itemidprev, $linktext);
1246                 else if ($this->skintype == 'search' || $this->skintype == 'index')
1247                         $this->_searchlink($amount, $startpos, 'prev', $linktext);
1248                 else
1249                         $this->_archivelink($archiveprev, $linktext);
1250         }
1251
1252         /**
1253          * Parse skinvar query
1254          * (includes the search query)
1255          */
1256         function parse_query() {
1257                 global $query;
1258                 echo htmlspecialchars($query,ENT_QUOTES);
1259         }
1260
1261         /**
1262          * Parse skinvar referer
1263          */
1264         function parse_referer() {
1265                 echo htmlspecialchars(serverVar('HTTP_REFERER'),ENT_QUOTES);
1266         }
1267
1268         /**
1269          * Parse skinvar searchform
1270          */
1271         function parse_searchform($blogname = '') {
1272                 global $CONF, $manager, $maxresults;
1273                 if ($blogname) {
1274                         $blog =& $manager->getBlog(getBlogIDFromName($blogname));
1275                 } else {
1276                         global $blog;
1277                 }
1278                 // use default blog when no blog is selected
1279                 $this->formdata = array(
1280                         'id' => $blog?$blog->getID():$CONF['DefaultBlog'],
1281                         'query' => htmlspecialchars(getVar('query'),ENT_QUOTES),
1282                 );
1283                 $this->doForm('searchform');
1284         }
1285
1286         /**
1287          * Parse skinvar searchresults
1288          */
1289         function parse_searchresults($template, $maxresults = 50 ) {
1290                 global $blog, $query, $amount, $startpos;
1291
1292                 $this->_setBlogCategory($blog, '');     // need this to select default category
1293                 $this->_preBlogContent('searchresults',$blog);
1294                 $this->amountfound = $blog->search($query, $template, $amount, $maxresults, $startpos);
1295                 $this->_postBlogContent('searchresults',$blog);
1296         }
1297
1298         /**
1299          * Parse skinvar self
1300          */
1301         function parse_self() {
1302                 global $CONF;
1303                 echo $CONF['Self'];
1304         }
1305
1306         /**
1307          * Parse skinvar sitevar
1308          * (include a sitevar)
1309          */
1310         function parse_sitevar($which) {
1311                 global $CONF;
1312                 switch($which) {
1313                         case 'url':
1314                                 echo $CONF['IndexURL'];
1315                                 break;
1316                         case 'name':
1317                                 echo $CONF['SiteName'];
1318                                 break;
1319                         case 'admin':
1320                                 echo $CONF['AdminEmail'];
1321                                 break;
1322                         case 'adminurl':
1323                                 echo $CONF['AdminURL'];
1324                 }
1325         }
1326
1327         /**
1328          * Parse skinname
1329          */
1330         function parse_skinname() {
1331                 echo $this->skin->getName();
1332         }
1333
1334         /**
1335          * Parse skintype (experimental)
1336          */
1337         function parse_skintype() {
1338                 echo $this->skintype;
1339         }
1340
1341         /**
1342          * Parse text
1343          */
1344         function parse_text($which) {
1345                 // constant($which) only available from 4.0.4 :(
1346                 if (defined($which)) {
1347                         eval("echo $which;");
1348                 }
1349         }
1350
1351         /**
1352          * Parse ticket
1353          */
1354         function parse_ticket() {
1355                 global $manager;
1356                 $manager->addTicketHidden();
1357         }
1358
1359         /**
1360          *      Parse skinvar todaylink
1361          *      A link to the today page (depending on selected blog, etc...)
1362          */
1363         function parse_todaylink($linktext = '') {
1364                 global $blog, $CONF;
1365                 if ($blog)
1366                         echo $this->_link(createBlogidLink($blog->getID(),$this->linkparams), $linktext);
1367                 else
1368                         echo $this->_link($CONF['SiteUrl'], $linktext);
1369         }
1370
1371         /**
1372          * Parse vars
1373          * When commentform is not used, to include a hidden field with itemid
1374          */
1375         function parse_vars() {
1376                 global $itemid;
1377                 echo '<input type="hidden" name="itemid" value="'.$itemid.'" />';
1378         }
1379
1380         /**
1381          * Parse skinvar version
1382          * (include nucleus versionnumber)
1383          */
1384         function parse_version() {
1385                 global $nucleus;
1386                 echo 'Nucleus CMS ' . $nucleus['version'];
1387         }
1388
1389         /**
1390          * Parse skinvar sticky
1391          */
1392         function parse_sticky($itemnumber = 0, $template = '') {
1393                 global $manager;
1394
1395                 $itemnumber = intval($itemnumber);
1396                 $itemarray = array($itemnumber);
1397
1398                 $b =& $manager->getBlog(getBlogIDFromItemID($itemnumber));
1399                 $this->_preBlogContent('sticky',$b);
1400                 $this->amountfound = $b->readLogFromList($itemarray, $template);
1401                 $this->_postBlogContent('sticky',$b);
1402         }
1403
1404
1405 }
1406 ?>