root/devel/mod/pages/lib/pages.inc.php

<?php
/**
 * Custom Pages plugin functions
 * $id$
 *
 * @copyright Copyright (c) 2007 Pro Soft Resources Inc. http://www.prosoftpeople.com
 * @author Rolando Espinoza La Fuente <rho@prosoftpeople.com>
 * @license http://www.gnu.org/copyleft/gpl.html GNU Public License
 * @todo documentation
 */

function pages_default($owner=-1) {
    if ($owner > 0) {
        $page = user_flag_get('pages_default', $owner);
        if (empty($pagename)) $page = __gettext('Main');
    } else {
        $obj = get_config('pages_default');
        $page = intval($obj->value);
    }

    return $page;
}

function pages_actions() {
    global $CFG, $messages;

    $action = optional_param('action');
    $do_action = optional_param('do');
    $owner = (int)page_owner();
    $owner = ($owner > 0) ? $owner : -1;

    if ((defined('context') && context == 'pages' || defined('pages_external')) && $action == 'pages:edit' && $do_action == 'edit' && permissions_check('pages::edit', $owner)) {
        $submit = optional_param('submit');
        // get page id
        $page_id = optional_param('page');

        if ($submit == __gettext('Save page')) {
            // default values
            $page = pages_input_override(null, $owner);
            // set owner

            // if noerrors
            if (empty($messages)) {
                if ($page->name == 'New page' || $page->title == 'New page') {
                    $messages[] = __gettext('You cannot use "New page" as page title or menu title.');
                } 
                
                // name record exists?
                if ($test = get_record_sql("SELECT ident FROM {$CFG->prefix}pages WHERE name = ? AND owner=?", array($page->name, $owner))) {
                    if (empty($page->ident) || $test->ident != $page->ident) {
                        $messages[] = __gettext('Menu title not available, please choose another.');
                    } else {
                        // update current record uri
                        if (empty($page->uri)) {
                            $page->uri = pages_build_uri($page->name);
                        }

                        if (empty($page->uri)) {
                            $messages[] = __gettext('Menu title not available, please choose another.');
                        } elseif ($test = get_record_sql("SELECT ident FROM {$CFG->prefix}pages WHERE uri = ? AND owner=?", array($page->uri, $owner))) {
                            if (empty($page->ident) || $test->ident != $page->ident) {
                                $messages[] = __gettext('Menu title not available, please choose another.');
                            }
                        }
                    }
                } else {
                    // new uri
                    if (empty($page->uri)) {
                        $page->uri = pages_build_uri($page->name);
                    }

                    if (empty($page->uri)) {
                        $messages[] = __gettext('Menu title not available, please choose another.');
                    } elseif ($test = get_record_sql("SELECT ident FROM {$CFG->prefix}pages WHERE uri = ? AND owner=?", array($page->uri, $owner))) {
                        if (empty($page->ident) || $test->ident != $page->ident) {
                            $messages[] = __gettext('Menu title not available, please choose another.');
                        }
                    }
                }

                if ($page->parent > 0 && !pages_exists((int)$page->parent, $owner)) {
                    $messages[] = __gettext('Invalid parent menu.');
                }
            }

            if (empty($messages)) {
                // set page owner if empty
                if (empty($page->owner)) {
                    $page->owner = $owner;
                }

                // let's insert the data
                if (empty($page->ident)) {
                    $rs = insert_record('pages', $page);
                    if ($rs) {
                        $messages[] = __gettext('Page created successful');
                        $page->ident = intval($rs);
                    } else {
                        $messages[] = __gettext('Error creating new page. Please try again.');
                        $page->ident = null;
                    }
                } else {
                    // last chance to verify integrity
                    if (!pages_exists((int)$page->ident, $owner)) {
                        $messages[] = __gettext('Error on update. That page does not exist.');
                        $rs = true;
                    } else {
                        $oldparent = get_field('pages', 'parent', 'ident', $page->ident);
                        $rs = update_record('pages', $page);
                        if ($rs) {
                            $messages[] = __gettext('Page updated successful');

                            // check parent menu changes
                            // If it's top menu, update childs 
                            if ($page->parent != $oldparent && $oldparent == 0) {
                                // set childs' parent to 0 (top menu)
                                execute_sql("UPDATE {$CFG->prefix}pages SET parent=0 WHERE parent={$page->ident} AND owner={$owner}", false);
                            }
                        } else {
                            $messages[] = __gettext('Error updating the page. Please try again.');
                        }
                    }
                }

                // data inserted/updated?
                if ($rs) {
                    // make default?
                    $default = optional_param('page-default');
                    if ($default) {
                        user_flag_set('pages_default', $page->ident, $owner);
                    }

                    pages_header_redirect(pages_url(intval($page->ident), 'pages::page', $owner));
                }
            }
        }

        if ($submit == __gettext('Delete')) {
            // page exists?
            if ($_page = get_record('pages', 'uri', $page_id, 'owner', $owner)) {
                // delete
                delete_records('pages', 'ident', $_page->ident);

                // update childs
                execute_sql("UPDATE {$CFG->prefix}pages SET parent=0 WHERE parent={$_page->ident} AND owner={$owner}", false);

                $messages[] = sprintf(__gettext('Page %s deleted successful.'), $page_id);
                // redirect
                pages_header_redirect(pages_url($owner, 'pages::'));
            } else {
                trigger_error(__FUNCTION__.": Trying to delete an non-existent page (page id: $page_id, owner: $owner)", E_USER_NOTICE);
            }
        }
    }
}

function pages_input_override($page=null, $owner=-1, $verbose=true) {
    global $CFG, $messages;

    $do_action = optional_param('do');

    if ($do_action == 'edit') {
        $submit = optional_param('submit');

        $title = trim(optional_param('page-title'));
        if (pages_php_allowed()) {
            $content = trim(optional_param('page-content', null, null));
        } else {
            $content = trim(optional_param('page-content'));
        }
        $name = trim(optional_param('page-name'));
        $parent = optional_param('menu-parent', 0, PARAM_INT);
        $weight = optional_param('menu-weight', 0, PARAM_INT);
        $uri = str_replace(' ', '', trim(optional_param('page-uri')));
        $access = optional_param('page-access');

        // try to get from uri query
        if (empty($page)) {
            $page_name = optional_param('page');
            if (!empty($page_name)) {
                //$page = get_record_sql("SELECT * FROM {$CFG->prefix}pages WHERE uri=? ", array($page_name));
                $page = get_record('pages', 'uri', $page_name, 'owner', $owner);
                if (empty($page)) {
                    $new_page_title = str_replace('_', ' ', $page_name);
                    // new page
                    $page = new StdClass;
                    $page->title = $new_page_title;
                    $page->content = pages_html_wrap('p', $new_page_title . __gettext(' Content'));
                    $page->name = $new_page_title;
                }
            } else {
                //  new page?
                //  always there should be page param
                $messages[] = __gettext('Page name empty.');
            }
        }

        // not null
        if (!empty($page)) {
            if (!empty($title)) {
                $page->title = htmlspecialchars_decode($title, ENT_QUOTES);
            } elseif ($verbose) {
                $messages[] = __gettext('Your title was empty.');
            }

            if (!empty($content)) {
                //$page->content = htmlspecialchars_decode($content, ENT_COMPAT);
                $page->content = $content;
            } elseif ($verbose) {
                $messages[] = __gettext('Your body was empty.');
            }

            if (!empty($name)) {
                $textlib = textlib_get_instance();
                $page->name = htmlspecialchars_decode($textlib->substr($name, 0, 127), ENT_QUOTES);
            } elseif ($verbose) {
                $messages[] = __gettext('Your menu title was empty.');
            }

            if (in_array($submit, array(__gettext('Save page'), __gettext('Preview')))) {
                $page->parent = $parent;
                $page->weight = $weight;
                $page->access = $access;
            }

            $page->parent = !isset($page->parent) ? $parent : $page->parent;
            $page->weight = !isset($page->weight) ? $weight : $page->weight;
            $page->access = !isset($page->access) ? $CFG->default_access : $page->access;

            if (!empty($uri)) {
                $page->uri = $uri;
            }

            //workaround
            if ($owner == -1 && pages_is_frontpage($page->name)) {
                $page->parent = -1;
                $page->access = 'PUBLIC';
                $page->owner = -1;
            }
        }
    }

    return $page;
}

function pages_create_page($page) {
    global $messages;
    if (!is_object($page)) {
        trigger_error(__FUNCTION__.": invalid argument (page: is not an object)", E_USER_ERROR);
    }

    if (empty($page->title) || empty($page->content)) {
        trigger_error(__FUNCTION__.": invalid argument (page title or content empty)", E_USER_ERROR);
    }

    if (empty($page->name)) {
        $page->name = $page->title;
    }

    if (empty($page->uri)) {
        $page->uri = pages_build_uri($page->name);
    }

    $rs = insert_record('pages', $page);
    if ($rs) {
        $page->ident = $rs;
        return $page;
    } else {
        return false; 
    }
}

function pages_get_page($page_name, $owner=-1) {

    if (empty($page_name)) {
        if ($owner > 0) {
            $page_id = (int) user_flag_get('pages_default', $owner);
        } else {
            $obj = get_config('pages_default');
            $page_id = intval($obj->value);
        }
        //TODO: do header redirect
        if (pages_exists($page_id, $owner)) {
            $page_url = pages_url($page_id, 'pages::page', $owner);
        } else {
            $page_url = pages_url(__gettext('Main'), 'pages::edit', $owner);
        }

        pages_header_redirect($page_url, 301);
    } else {
        // remove trailing slash
        $page_name = preg_replace('|(/)$|', '', $page_name);
    }

    $page = get_record('pages', 'uri', $page_name, 'owner', $owner);

    //FIXME: auto correct parent
    if ($page->ident == $page->parent) {
        $_page = new StdClass;
        $_page->ident = $page->ident;
        $_page->parent = 0;
        update_record('pages', $_page);
        unset($_page);
    }

    if (isset($page->ident) && permissions_check('pages::access', $page->ident) || permissions_check('pages::edit', $owner)) {
        if (isset($page->content)) {
            pages_current_page($page);
        } else {
            // check for legacy content pages
            if ($owner == -1) {
                $page = pages_get_legacy($page_name);
            }

            if (empty($page)) {
                // Page not found
                $page = pages_page_not_found();
            }
        }
    } else {
        if (isset($page->ident)) { // page exists?
            $page = pages_page_denied();
        } else {
            // check for legacy content pages
            if ($owner == -1) {
                $page = pages_get_legacy($page_name);
            }

            if (empty($page)) {
                // Page not found
                $page = pages_page_not_found();
            }
        }
    }

    if (!empty($page->title)) $page->title = pages_process_content($page->title);
    if (!empty($page->content)) $page->content = pages_process_content($page->content);

    return $page;
}

function pages_get_legacy($page_name) {
    global $CFG, $PAGE;

    if (isset($PAGE->pages->old_compat[$page_name])) {
        $page = new StdClass;
        $page->title = $PAGE->pages->old_compat[$page_name]['title'];
        $page->content = run($PAGE->pages->old_compat[$page_name]['function']);
        // strip content title
        $page->content = preg_replace('|^<h1>(.+)</h1>|', '', $page->content);
        $page->name = $page->title;
    } else {
        $page = null;
    }

    return $page;
}

function pages_process_content($content) {
    // execute php code
    if (pages_php_allowed()) {
        $content = pages_eval($content);
    }

    // parse elgg template keywords
    if (PAGES_PARSE_KEYWORDS) {
        // wrap into templates_draw
        global $template;
        $tmp_name = 'pages:' . mt_rand();
        $template[$tmp_name] = $content;

        // replace all keywords
        $content = templates_draw(array('context' => $tmp_name));

        // clear template
        unset($template[$tmp_name]);
    }

    // process with blog filters
    if (PAGES_BLOG_TEXTPROC) {
        $content = run('weblogs:text:process', $content);
    }

    return $content;
}

function pages_is_frontpage($page_name) {
    if ($page_name == 'frontpage_loggedin' || $page_name == 'frontpage_loggedout') {
        return true;
    } else {
        return false;
    }
}

function pages_is_editing() {
    global $PAGE;

    return isset($PAGE->pages->editing);
}

function pages_edit_page($page_name, $owner=-1) {
    global $CFG, $PAGE;

    $PAGE->pages->editing = true;

    if (pages_enabled() && !empty($page_name) && permissions_check('pages::edit', $owner)) {
        if ($owner == -1 && pages_is_frontpage($page_name)) {
            $is_frontpage = true;
        } else {
            $is_frontpage = false;
        }

        if (!$page = get_record('pages', 'uri', $page_name, 'owner', $owner)) {
            // try to edit legacy content
            if ($owner == -1) {
                $page = pages_get_legacy($page_name);
            }
        } else {
            pages_current_page($page);
        }

        $page = pages_input_override($page, $owner, false);

        if (isset($page->ident)) {
            $page->ident = intval($page->ident);
        }

        //if frontpage force some value
        if ($is_frontpage) {
            $page->name = $page_name;
            $page->parent = -1; //hidden
            $page->access = 'PUBLIC'; //force public
        } 

        $title_enc = htmlspecialchars($page->title, ENT_QUOTES, 'utf-8');
        //$page->content = htmlspecialchars(stripslashes($page->content), ENT_COMPAT, 'utf-8');
        $page->content = trim($page->content);
        $page->name = htmlspecialchars($page->name, ENT_QUOTES, 'utf-8');

        $input_title = pages_html_wrap('label', __gettext('Title:'), array('for' => 'page-title'));
        $input_title .= pages_html_input(
                        'text',
                        array(
                            'id' => 'page-title',
                            'name' => 'page-title',
                            'value' => $title_enc,
                            'maxlength' => 127,
                            'style' => 'width:100%;',
                            )
                        );

        $input_content = pages_html_wrap('label', __gettext('Content:'), array('for' => 'page-content'));
        $input_content .= pages_html_wrap(