urosm
/
ikiwiki
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
ikiwiki/templates/editpage.tmpl

66 lines
1.6 KiB
Cheetah
Raw Normal View History

toggle: Add javascript to top of page, not to end. This avoids flicker since closed toggles will not be displayed as the page is loading.
2008-07-02 22:14:18 +02:00
<TMPL_VAR JAVASCRIPT>
Split out error messages from editpage.tmpl into several separate templates.
2008-07-23 01:58:34 +02:00
<TMPL_VAR MESSAGE>
- use templates for signin form, error messages - use FormBuilder for edit page forms (also use template) - print debug to stderr in cgi mode to avoid breaking http headers - fix links to page in parentlinks if $url is unset - reorganise how wikilink is used in templates - only make recentchanes link if svn is enabled - change session id cookie to something we control - add support for logging committer name for web commits from signed in users (untested) - probably more changes I forgot
2006-03-12 17:37:26 +01:00
<TMPL_VAR FORM-START>
<TMPL_VAR FIELD-DO>
Fix CSRF attacks against the preferences and edit forms. Closes: #475445 The fix involved embedding the session id in the forms, and not allowing the forms to be submitted if the embedded id does not match the session id. In the case of the preferences form, if the session id is not embedded, then the CGI parameters are cleared. This avoids a secondary attack where the link to the preferences form prefills password or other fields, and the user hits "submit" without noticing these prefilled values. In the case of the editpage form, the anonok plugin can allow anyone to edit, and so I chose not to guard against CSRF attacks against users who are not logged in. Otherwise, it also embeds the session id and checks it. For page editing, I assume that the user will notice if content or commit message is changed because of CGI parameters, and won't blndly hit save page. So I didn't block those CGI paramters. (It's even possible to use those CGI parameters, for good, not for evil, I guess..) The only other CSRF attack I can think of in ikiwiki involves the poll plugin. It's certianly possible to set up a link that causes the user to unknowingly vote in a poll. However, the poll plugin is not intended to be used for things that people would want to attack, since anyone can after all edit the poll page and fill in any values they like. So this "attack" is ignorable.
2008-04-10 22:35:30 +02:00
<TMPL_VAR FIELD-SID>
- use templates for signin form, error messages - use FormBuilder for edit page forms (also use template) - print debug to stderr in cgi mode to avoid breaking http headers - fix links to page in parentlinks if $url is unset - reorganise how wikilink is used in templates - only make recentchanes link if svn is enabled - change session id cookie to something we control - add support for logging committer name for web commits from signed in users (untested) - probably more changes I forgot
2006-03-12 17:37:26 +01:00
<TMPL_VAR FIELD-FROM>
conflict detection, merging, etc should be done now, I think
2006-03-19 21:34:59 +01:00
<TMPL_VAR FIELD-RCSINFO>
* Patch from Ethan to improve behavior if a page is deleted or moved while someone is editing it. * Some cleanup of field setting in the failed edit and conflict handling code.
2007-02-24 01:39:06 +01:00
<TMPL_VAR FIELD-NEWFILE>
Gave comment and page editing forms some CSS and accessability love. In particular, added <label> tags. (However, could not find a good way to add a label tag for the main page edit textarea.)
2010-05-07 03:45:17 +02:00
<ol class="form">
<TMPL_IF NAME="PAGE_SELECT">
<li>
<label for="page" class="inline">Page location:</label><TMPL_VAR FIELD-PAGE>
<label for="type" class="inline">Page type:</label><TMPL_VAR FIELD-TYPE>
</li>
- use templates for signin form, error messages - use FormBuilder for edit page forms (also use template) - print debug to stderr in cgi mode to avoid breaking http headers - fix links to page in parentlinks if $url is unset - reorganise how wikilink is used in templates - only make recentchanes link if svn is enabled - change session id cookie to something we control - add support for logging committer name for web commits from signed in users (untested) - probably more changes I forgot
2006-03-12 17:37:26 +01:00
<TMPL_ELSE>
<TMPL_VAR FIELD-PAGE>
* Patch from Recai to allow selection of page type when creating a new page. Default page type is inherited from the link clicked on to create the new page.
2006-07-26 23:23:06 +02:00
<TMPL_VAR FIELD-TYPE>
- use templates for signin form, error messages - use FormBuilder for edit page forms (also use template) - print debug to stderr in cgi mode to avoid breaking http headers - fix links to page in parentlinks if $url is unset - reorganise how wikilink is used in templates - only make recentchanes link if svn is enabled - change session id cookie to something we control - add support for logging committer name for web commits from signed in users (untested) - probably more changes I forgot
2006-03-12 17:37:26 +01:00
</TMPL_IF>
Gave comment and page editing forms some CSS and accessability love. In particular, added <label> tags. (However, could not find a good way to add a label tag for the main page edit textarea.)
2010-05-07 03:45:17 +02:00
<li>
* Add -refresh option to ikiwiki-mass-rebuild and use that on upgrades that do not need a full rebuild, in order to update any basewiki pages.
2006-05-27 21:04:46 +02:00
<TMPL_VAR FIELD-EDITCONTENT><br />
Gave comment and page editing forms some CSS and accessability love. In particular, added <label> tags. (However, could not find a good way to add a label tag for the main page edit textarea.)
2010-05-07 03:45:17 +02:00
</li>
<TMPL_IF NAME="CAN_COMMIT">
<li>
<label for="comments" class="block">Optional comment about this change:</label>
html validation fixes: - escape & in urls (also clean up cgi url generation) - since markdown wraps inlined pages in <p></p>, close and re-open the paragraph tags when generating the embedded html - added XHTML 1.0 doctypes to templates - fixed <hr /> and <br /> in templates - add an alt attribute to inline images, based on the WikiLink to the image. Allows things like [[my_image|img.png]] to customise alt text.
2006-03-29 05:18:21 +02:00
<TMPL_VAR FIELD-COMMENTS><br />
Gave comment and page editing forms some CSS and accessability love. In particular, added <label> tags. (However, could not find a good way to add a label tag for the main page edit textarea.)
2010-05-07 03:45:17 +02:00
</li>
- use templates for signin form, error messages - use FormBuilder for edit page forms (also use template) - print debug to stderr in cgi mode to avoid breaking http headers - fix links to page in parentlinks if $url is unset - reorganise how wikilink is used in templates - only make recentchanes link if svn is enabled - change session id cookie to something we control - add support for logging committer name for web commits from signed in users (untested) - probably more changes I forgot
2006-03-12 17:37:26 +01:00
</TMPL_IF>
Gave comment and page editing forms some CSS and accessability love. In particular, added <label> tags. (However, could not find a good way to add a label tag for the main page edit textarea.)
2010-05-07 03:45:17 +02:00
</ol>
* Applied Jeremie Koenig's pluggable editpage buttons patch: - add a title to the editpage form; - pass a reference to the list of buttons to the formbuilder_setup hooks, so we can add ours; - relax asumption about the possible submit values (use "Save Page" explicitly); - de-hardcode the submit buttons from the editpage template (This was needed for compatability with a bug in CGI::FormBuilder 3.0401, but ikiwiki already needs a newer version.) * Pass buttons to all other formbuilder_setup hooks too.
2007-08-17 07:34:59 +02:00
<TMPL_VAR FORM-SUBMIT>
so make sure to let perl know it should be handled as utf8. Also, * Improve layout of edit page so formatting help link is always visible w/o getting in the way of the preview.
2006-07-02 19:44:43 +02:00
<TMPL_VAR HELPONFORMATTINGLINK>
Gave comment and page editing forms some CSS and accessability love. In particular, added <label> tags. (However, could not find a good way to add a label tag for the main page edit textarea.)
2010-05-07 03:45:17 +02:00
<TMPL_IF NAME="FIELD-ATTACHMENT">
editpage: Don't show attachments link when attachments are disabled.
2008-07-21 18:15:55 +02:00
<a class="toggle" href="#attachments">Attachments</a>
attachments interface visibility toggling
2008-07-02 21:42:32 +02:00
<div class="<TMPL_VAR ATTACHMENTS-CLASS>" id="attachments">
<table>
xhtml fixes
2008-07-02 22:08:48 +02:00
<tr><td colspan="5"><TMPL_VAR FIELD-ATTACHMENT><TMPL_VAR FIELD-UPLOAD></td></tr>
Gave comment and page editing forms some CSS and accessability love. In particular, added <label> tags. (However, could not find a good way to add a label tag for the main page edit textarea.)
2010-05-07 03:45:17 +02:00
<TMPL_LOOP NAME="ATTACHMENT_LIST">
basic attachment list
2008-07-01 23:19:38 +02:00
<tr><td><TMPL_VAR FIELD-SELECT><TMPL_VAR LINK></td><td><TMPL_VAR SIZE></td><td><TMPL_VAR MTIME></td></tr>
</TMPL_LOOP>
Gave comment and page editing forms some CSS and accessability love. In particular, added <label> tags. (However, could not find a good way to add a label tag for the main page edit textarea.)
2010-05-07 03:45:17 +02:00
<TMPL_IF NAME="ATTACHMENT_LIST">
skeleton rename plugin
2008-07-22 04:30:43 +02:00
<tr><td colspan="2"><TMPL_VAR FIELD-LINK><TMPL_VAR FIELD-RENAME><TMPL_VAR FIELD-REMOVE></td></tr>
basic attachment list
2008-07-01 23:19:38 +02:00
</TMPL_IF>
</table>
</div>
add support for an attachment upload field FormBuilder makes it annoyingly hard to move a submit button to a nonstandard place. The button name has to be "_submit" or FormBuilder will ignore it.
2008-07-01 03:15:19 +02:00
</TMPL_IF>
- use templates for signin form, error messages - use FormBuilder for edit page forms (also use template) - print debug to stderr in cgi mode to avoid breaking http headers - fix links to page in parentlinks if $url is unset - reorganise how wikilink is used in templates - only make recentchanes link if svn is enabled - change session id cookie to something we control - add support for logging committer name for web commits from signed in users (untested) - probably more changes I forgot
2006-03-12 17:37:26 +01:00
<TMPL_VAR FORM-END>
forgot to add wmd tag here
2009-03-08 00:52:14 +01:00
<TMPL_VAR WMD_PREVIEW>
* Wrap the editpage template in the standard misctemplate, this allows the pagetemplate hook to work for that page. * Above change fixes the favicon plugin to work on edit pages.
2007-07-16 07:24:31 +02:00
Gave comment and page editing forms some CSS and accessability love. In particular, added <label> tags. (However, could not find a good way to add a label tag for the main page edit textarea.)
2010-05-07 03:45:17 +02:00
<TMPL_IF NAME="PAGE_PREVIEW">
so make sure to let perl know it should be handled as utf8. Also, * Improve layout of edit page so formatting help link is always visible w/o getting in the way of the preview.
2006-07-02 19:44:43 +02:00
<hr />
header can appear more than one time, so is a class, not an id
2006-05-26 03:42:00 +02:00
<div class="header">
* The page name and parent links has switched from using a <h1> to a styled <span>, so pages can use <h1> internally instead of needing to use <h2>. * Updated all of ikiwiki's own wiki pages for that. * Add pagetemplate hook, which can be used by plugins that want to mess around with adding new stuff to the page template. * Remove headercontent; the search plugin now adds the search box to the header by registering a pagetemplate hook, and other plugins should do similarly.
2006-05-26 03:10:58 +02:00
<span>Page preview:</span>
css support
2006-03-29 09:24:03 +02:00
</div>
* Wrap the editpage template in the standard misctemplate, this allows the pagetemplate hook to work for that page. * Above change fixes the favicon plugin to work on edit pages.
2007-07-16 07:24:31 +02:00
<div id="preview">
dd page preview
2006-03-16 22:39:45 +01:00
<TMPL_VAR PAGE_PREVIEW>
css support
2006-03-29 09:24:03 +02:00
</div>
dd page preview
2006-03-16 22:39:45 +01:00
</TMPL_IF>
fix pagediff to not display as "preview" I think originally, the page preview header was not displayed, so diff was hacked in using it.
2010-05-07 04:19:14 +02:00
<TMPL_IF NAME="PAGE_DIFF">
<hr />
<div class="header">
<span>Diff:</span>
</div>
<div id="diff">
<TMPL_VAR PAGE_DIFF>
</div>
</TMPL_IF>