<?php authorize(); $ArticleID = Wiki::alias_to_id($_GET['alias']); $DB->query("SELECT MinClassEdit FROM wiki_articles WHERE ID = {$ArticleID}"); list($MinClassEdit) = $DB->next_record(); if ($MinClassEdit > $LoggedUser['EffectiveClass']) { error(403); } $DB->query("DELETE FROM wiki_aliases WHERE Alias='" . Wiki::normalize_alias($_GET['alias']) . "'"); Wiki::flush_article($ArticleID); Wiki::flush_aliases();
if (check_perms('admin_manage_wiki')) { $Read = $_POST['minclassread']; $Edit = $_POST['minclassedit']; if (!is_number($Read)) { error(0); //int? } if (!is_number($Edit)) { error(0); } if ($Edit > $LoggedUser['EffectiveClass']) { error('You can\'t restrict articles above your own level'); } if ($Edit < $Read) { $Edit = $Read; //Human error fix. } } else { $Read = 100; $Edit = 100; } $DB->query("\n\tINSERT INTO wiki_articles\n\t\t(Revision, Title, Body, MinClassRead, MinClassEdit, Date, Author)\n\tVALUES\n\t\t('1', '{$P['title']}', '{$P['body']}', '{$Read}', '{$Edit}', '" . sqltime() . "', '{$LoggedUser['ID']}')"); $ArticleID = $DB->inserted_id(); $TitleAlias = Wiki::normalize_alias($_POST['title']); $Dupe = Wiki::alias_to_id($_POST['title']); if ($TitleAlias != '' && $Dupe === false) { $DB->query("\n\t\tINSERT INTO wiki_aliases (Alias, ArticleID)\n\t\tVALUES ('" . db_string($TitleAlias) . "', '{$ArticleID}')"); Wiki::flush_aliases(); } Misc::write_log("Wiki article {$ArticleID} (" . $_POST['title'] . ") was created by " . $LoggedUser['Username']); header("Location: wiki.php?action=article&id={$ArticleID}");
$SQL .= implode("%' AND {$Type} LIKE '%", $Words); $SQL .= "%' "; } $SQL .= "\n\tORDER BY {$Order} {$Way}\n\tLIMIT {$Limit} "; $RS = $DB->query($SQL); $DB->query("\n\tSELECT FOUND_ROWS()"); list($NumResults) = $DB->next_record(); View::show_header('Search articles'); $DB->set_query_id($RS); ?> <div class="thin"> <div class="header"> <h2>Search articles</h2> <div class="linkbox"> <a href="wiki.php?action=create&alias=<?php echo display_str(Wiki::normalize_alias($_GET['search'])); ?> " class="brackets">Create an article</a> </div> </div> <div> <form action="" method="get"> <div> <input type="hidden" name="action" value="search" /> <input type="hidden" name="nojump" value="1" /> </div> <table cellpadding="6" cellspacing="1" border="0" class="layout border" width="100%"> <tr> <td class="label"><label for="search"><strong>Search for:</strong></label></td> <td colspan="3"> <input type="search" name="search" id="search" size="70" value="<?php
//No article found View::show_header('No article found'); ?> <div class="thin"> <div class="header"> <h2>No article found</h2> </div> <div class="box pad" style="padding: 10px 10px 10px 20px;"> There is no article matching the name you requested. <ul> <li><a href="wiki.php?action=search&search=<?php echo display_str($_GET['name']); ?> ">Search</a> for an article similar to this.</li> <li><a href="wiki.php?action=create&alias=<?php echo display_str(Wiki::normalize_alias($_GET['name'])); ?> ">Create</a> an article in its place.</li> </ul> </div> </div> <?php View::show_footer(); die; } $Article = Wiki::get_article($ArticleID); list($Revision, $Title, $Body, $Read, $Edit, $Date, $AuthorID, $AuthorName, $Aliases, $UserIDs) = array_shift($Article); if ($Read > $LoggedUser['EffectiveClass']) { error('You must be a higher user class to view this wiki article'); } $TextBody = Text::full_format($Body, false);
<?php authorize(); if (!isset($_POST['article']) || !is_number($_POST['article'])) { error(0); } $ArticleID = (int) $_POST['article']; $DB->query("SELECT MinClassEdit FROM wiki_articles WHERE ID = {$ArticleID}"); list($MinClassEdit) = $DB->next_record(); if ($MinClassEdit > $LoggedUser['EffectiveClass']) { error(403); } $NewAlias = Wiki::normalize_alias($_POST['alias']); $Dupe = Wiki::alias_to_id($_POST['alias']); if ($NewAlias != '' && $NewAlias != 'addalias' && $Dupe === false) { //Not null, and not dupe $DB->query("INSERT INTO wiki_aliases (Alias, UserID, ArticleID) VALUES ('{$NewAlias}', '{$LoggedUser['ID']}', '{$ArticleID}')"); } else { error('The alias you attempted to add was either null or already in the database.'); } Wiki::flush_aliases(); Wiki::flush_article($ArticleID); header('Location: wiki.php?action=article&id=' . $ArticleID);