urosm
/
ikiwiki
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
ikiwiki/templates/editpage.tmpl

68 lines
1.6 KiB
Cheetah
Raw Normal View History

toggle: Add javascript to top of page, not to end. This avoids flicker since closed toggles will not be displayed as the page is loading.
2008-07-02 22:14:18 +02:00
<TMPL_VAR JAVASCRIPT>
Split out error messages from editpage.tmpl into several separate templates.
2008-07-23 01:58:34 +02:00
<TMPL_VAR MESSAGE>
- use templates for signin form, error messages - use FormBuilder for edit page forms (also use template) - print debug to stderr in cgi mode to avoid breaking http headers - fix links to page in parentlinks if $url is unset - reorganise how wikilink is used in templates - only make recentchanes link if svn is enabled - change session id cookie to something we control - add support for logging committer name for web commits from signed in users (untested) - probably more changes I forgot
2006-03-12 17:37:26 +01:00
<TMPL_VAR FORM-START>
<TMPL_VAR FIELD-DO>
Fix CSRF attacks against the preferences and edit forms. Closes: #475445 The fix involved embedding the session id in the forms, and not allowing the forms to be submitted if the embedded id does not match the session id. In the case of the preferences form, if the session id is not embedded, then the CGI parameters are cleared. This avoids a secondary attack where the link to the preferences form prefills password or other fields, and the user hits "submit" without noticing these prefilled values. In the case of the editpage form, the anonok plugin can allow anyone to edit, and so I chose not to guard against CSRF attacks against users who are not logged in. Otherwise, it also embeds the session id and checks it. For page editing, I assume that the user will notice if content or commit message is changed because of CGI parameters, and won't blndly hit save page. So I didn't block those CGI paramters. (It's even possible to use those CGI parameters, for good, not for evil, I guess..) The only other CSRF attack I can think of in ikiwiki involves the poll plugin. It's certianly possible to set up a link that causes the user to unknowingly vote in a poll. However, the poll plugin is not intended to be used for things that people would want to attack, since anyone can after all edit the poll page and fill in any values they like. So this "attack" is ignorable.
2008-04-10 22:35:30 +02:00
<TMPL_VAR FIELD-SID>
- use templates for signin form, error messages - use FormBuilder for edit page forms (also use template) - print debug to stderr in cgi mode to avoid breaking http headers - fix links to page in parentlinks if $url is unset - reorganise how wikilink is used in templates - only make recentchanes link if svn is enabled - change session id cookie to something we control - add support for logging committer name for web commits from signed in users (untested) - probably more changes I forgot
2006-03-12 17:37:26 +01:00
<TMPL_VAR FIELD-FROM>
conflict detection, merging, etc should be done now, I think
2006-03-19 21:34:59 +01:00
<TMPL_VAR FIELD-RCSINFO>
* Patch from Ethan to improve behavior if a page is deleted or moved while someone is editing it. * Some cleanup of field setting in the failed edit and conflict handling code.
2007-02-24 01:39:06 +01:00
<TMPL_VAR FIELD-NEWFILE>
Gave comment and page editing forms some CSS and accessability love. In particular, added <label> tags. (However, could not find a good way to add a label tag for the main page edit textarea.)
2010-05-07 03:45:17 +02:00
<ol class="form">
<TMPL_IF NAME="PAGE_SELECT">
<li>
<label for="page" class="inline">Page location:</label><TMPL_VAR FIELD-PAGE>
<label for="type" class="inline">Page type:</label><TMPL_VAR FIELD-TYPE>
</li>
- use templates for signin form, error messages - use FormBuilder for edit page forms (also use template) - print debug to stderr in cgi mode to avoid breaking http headers - fix links to page in parentlinks if $url is unset - reorganise how wikilink is used in templates - only make recentchanes link if svn is enabled - change session id cookie to something we control - add support for logging committer name for web commits from signed in users (untested) - probably more changes I forgot
2006-03-12 17:37:26 +01:00
<TMPL_ELSE>
<TMPL_VAR FIELD-PAGE>
* Patch from Recai to allow selection of page type when creating a new page. Default page type is inherited from the link clicked on to create the new page.
2006-07-26 23:23:06 +02:00
<TMPL_VAR FIELD-TYPE>
- use templates for signin form, error messages - use FormBuilder for edit page forms (also use template) - print debug to stderr in cgi mode to avoid breaking http headers - fix links to page in parentlinks if $url is unset - reorganise how wikilink is used in templates - only make recentchanes link if svn is enabled - change session id cookie to something we control - add support for logging committer name for web commits from signed in users (untested) - probably more changes I forgot
2006-03-12 17:37:26 +01:00
</TMPL_IF>
Gave comment and page editing forms some CSS and accessability love. In particular, added <label> tags. (However, could not find a good way to add a label tag for the main page edit textarea.)
2010-05-07 03:45:17 +02:00
<li>
style.css: Improvements to make floating sidebar fit better on pages with inlines. The key is using width: auto; overflow: auto; -- this allows the div(s) to the left of the floating sidebar to be resized to fit next to it, and prevents any clear: both from pushing the div down below the end of the sidebar. Many thanks for the Hurd wiki's developers for originally figuring this out. The edit page recently developed the same problem with its textarea, now that a sidebar can appear on that page too. In editpage.tmpl I needed to add a new div around the editcontent textarea, as the above styles cannot be applied directly to textareas. The textarea's own width is reduced to 98% because at least in chromium this avoids it getting unnecessary horizonatl scrollbars when a sidebar is displayed next to it.
2010-06-10 20:14:46 +02:00
<div class="editcontentdiv">
* Add -refresh option to ikiwiki-mass-rebuild and use that on upgrades that do not need a full rebuild, in order to update any basewiki pages.
2006-05-27 21:04:46 +02:00
<TMPL_VAR FIELD-EDITCONTENT><br />
style.css: Improvements to make floating sidebar fit better on pages with inlines. The key is using width: auto; overflow: auto; -- this allows the div(s) to the left of the floating sidebar to be resized to fit next to it, and prevents any clear: both from pushing the div down below the end of the sidebar. Many thanks for the Hurd wiki's developers for originally figuring this out. The edit page recently developed the same problem with its textarea, now that a sidebar can appear on that page too. In editpage.tmpl I needed to add a new div around the editcontent textarea, as the above styles cannot be applied directly to textareas. The textarea's own width is reduced to 98% because at least in chromium this avoids it getting unnecessary horizonatl scrollbars when a sidebar is displayed next to it.
2010-06-10 20:14:46 +02:00
</div>
Gave comment and page editing forms some CSS and accessability love. In particular, added <label> tags. (However, could not find a good way to add a label tag for the main page edit textarea.)
2010-05-07 03:45:17 +02:00
</li>
<TMPL_IF NAME="CAN_COMMIT">
<li>
editpage: Rename "comments" field to avoid CSS conflict with the comments div.
2010-06-13 00:10:33 +02:00
<label for="editmessage" class="block">Optional comment about this change:</label>
<TMPL_VAR FIELD-EDITMESSAGE><br />
Gave comment and page editing forms some CSS and accessability love. In particular, added <label> tags. (However, could not find a good way to add a label tag for the main page edit textarea.)
2010-05-07 03:45:17 +02:00
</li>
- use templates for signin form, error messages - use FormBuilder for edit page forms (also use template) - print debug to stderr in cgi mode to avoid breaking http headers - fix links to page in parentlinks if $url is unset - reorganise how wikilink is used in templates - only make recentchanes link if svn is enabled - change session id cookie to something we control - add support for logging committer name for web commits from signed in users (untested) - probably more changes I forgot
2006-03-12 17:37:26 +01:00
</TMPL_IF>
Gave comment and page editing forms some CSS and accessability love. In particular, added <label> tags. (However, could not find a good way to add a label tag for the main page edit textarea.)
2010-05-07 03:45:17 +02:00
</ol>
* Applied Jeremie Koenig's pluggable editpage buttons patch: - add a title to the editpage form; - pass a reference to the list of buttons to the formbuilder_setup hooks, so we can add ours; - relax asumption about the possible submit values (use "Save Page" explicitly); - de-hardcode the submit buttons from the editpage template (This was needed for compatability with a bug in CGI::FormBuilder 3.0401, but ikiwiki already needs a newer version.) * Pass buttons to all other formbuilder_setup hooks too.
2007-08-17 07:34:59 +02:00
<TMPL_VAR FORM-SUBMIT>
so make sure to let perl know it should be handled as utf8. Also, * Improve layout of edit page so formatting help link is always visible w/o getting in the way of the preview.
2006-07-02 19:44:43 +02:00
<TMPL_VAR HELPONFORMATTINGLINK>
Gave comment and page editing forms some CSS and accessability love. In particular, added <label> tags. (However, could not find a good way to add a label tag for the main page edit textarea.)
2010-05-07 03:45:17 +02:00
<TMPL_IF NAME="FIELD-ATTACHMENT">
editpage: Don't show attachments link when attachments are disabled.
2008-07-21 18:15:55 +02:00
<a class="toggle" href="#attachments">Attachments</a>
attachments interface visibility toggling
2008-07-02 21:42:32 +02:00
<div class="<TMPL_VAR ATTACHMENTS-CLASS>" id="attachments">
<table>
xhtml fixes
2008-07-02 22:08:48 +02:00
<tr><td colspan="5"><TMPL_VAR FIELD-ATTACHMENT><TMPL_VAR FIELD-UPLOAD></td></tr>
Gave comment and page editing forms some CSS and accessability love. In particular, added <label> tags. (However, could not find a good way to add a label tag for the main page edit textarea.)
2010-05-07 03:45:17 +02:00
<TMPL_LOOP NAME="ATTACHMENT_LIST">
basic attachment list
2008-07-01 23:19:38 +02:00
<tr><td><TMPL_VAR FIELD-SELECT><TMPL_VAR LINK></td><td><TMPL_VAR SIZE></td><td><TMPL_VAR MTIME></td></tr>
</TMPL_LOOP>
Gave comment and page editing forms some CSS and accessability love. In particular, added <label> tags. (However, could not find a good way to add a label tag for the main page edit textarea.)
2010-05-07 03:45:17 +02:00
<TMPL_IF NAME="ATTACHMENT_LIST">
skeleton rename plugin
2008-07-22 04:30:43 +02:00
<tr><td colspan="2"><TMPL_VAR FIELD-LINK><TMPL_VAR FIELD-RENAME><TMPL_VAR FIELD-REMOVE></td></tr>
basic attachment list
2008-07-01 23:19:38 +02:00
</TMPL_IF>
</table>
</div>
add support for an attachment upload field FormBuilder makes it annoyingly hard to move a submit button to a nonstandard place. The button name has to be "_submit" or FormBuilder will ignore it.
2008-07-01 03:15:19 +02:00
</TMPL_IF>
- use templates for signin form, error messages - use FormBuilder for edit page forms (also use template) - print debug to stderr in cgi mode to avoid breaking http headers - fix links to page in parentlinks if $url is unset - reorganise how wikilink is used in templates - only make recentchanes link if svn is enabled - change session id cookie to something we control - add support for logging committer name for web commits from signed in users (untested) - probably more changes I forgot
2006-03-12 17:37:26 +01:00
<TMPL_VAR FORM-END>
forgot to add wmd tag here
2009-03-08 00:52:14 +01:00
<TMPL_VAR WMD_PREVIEW>
* Wrap the editpage template in the standard misctemplate, this allows the pagetemplate hook to work for that page. * Above change fixes the favicon plugin to work on edit pages.
2007-07-16 07:24:31 +02:00
Gave comment and page editing forms some CSS and accessability love. In particular, added <label> tags. (However, could not find a good way to add a label tag for the main page edit textarea.)
2010-05-07 03:45:17 +02:00
<TMPL_IF NAME="PAGE_PREVIEW">
so make sure to let perl know it should be handled as utf8. Also, * Improve layout of edit page so formatting help link is always visible w/o getting in the way of the preview.
2006-07-02 19:44:43 +02:00
<hr />
header can appear more than one time, so is a class, not an id
2006-05-26 03:42:00 +02:00
<div class="header">
* The page name and parent links has switched from using a <h1> to a styled <span>, so pages can use <h1> internally instead of needing to use <h2>. * Updated all of ikiwiki's own wiki pages for that. * Add pagetemplate hook, which can be used by plugins that want to mess around with adding new stuff to the page template. * Remove headercontent; the search plugin now adds the search box to the header by registering a pagetemplate hook, and other plugins should do similarly.
2006-05-26 03:10:58 +02:00
<span>Page preview:</span>
css support
2006-03-29 09:24:03 +02:00
</div>
* Wrap the editpage template in the standard misctemplate, this allows the pagetemplate hook to work for that page. * Above change fixes the favicon plugin to work on edit pages.
2007-07-16 07:24:31 +02:00
<div id="preview">
dd page preview
2006-03-16 22:39:45 +01:00
<TMPL_VAR PAGE_PREVIEW>
css support
2006-03-29 09:24:03 +02:00
</div>
dd page preview
2006-03-16 22:39:45 +01:00
</TMPL_IF>
fix pagediff to not display as "preview" I think originally, the page preview header was not displayed, so diff was hacked in using it.
2010-05-07 04:19:14 +02:00
<TMPL_IF NAME="PAGE_DIFF">
<hr />
<div class="header">
<span>Diff:</span>
</div>
<div id="diff">
<TMPL_VAR PAGE_DIFF>
</div>
</TMPL_IF>