Nucleus CMS日本語版用プラグインのうち、日本語版開発者がサポートしているもの
Revision | c331eca08e3cc8f94d3739c30544c853315bebf2 (tree) |
---|---|
Time | 2006-10-15 21:47:56 |
Author | hsur <hsur@1ca2...> |
Commiter | hsur |
SpamCheckについて微調整
Ticket処理を追加(NP_0TicketForPlugin併用を前提)
git-svn-id: https://svn.sourceforge.jp/svnroot/nucleus-jp/plugin@453 1ca29b6e-896d-4ea0-84a5-967f57386b96
@@ -31,7 +31,7 @@ | ||
31 | 31 | |
32 | 32 | //modify start+++++++++ |
33 | 33 | function _createItemLink($itemid, $b){ |
34 | - global $CONF, $manager, $blog; | |
34 | + global $CONF, $manager; | |
35 | 35 | $blogurl = $b->getURL(); |
36 | 36 | |
37 | 37 | if (!$blogurl) { |
@@ -64,7 +64,7 @@ | ||
64 | 64 | */ |
65 | 65 | function doSkinVar($skinType, $what = '', $tb_id = '', $amount = 'limit-1') { |
66 | 66 | |
67 | - global $itemid; | |
67 | + global $itemid, $manager, $CONF; | |
68 | 68 | |
69 | 69 | //modify start+++++++++ |
70 | 70 | if(eregi('limit', $tb_id)){ |
@@ -138,6 +138,10 @@ | ||
138 | 138 | case 'manualpingformlink': |
139 | 139 | echo $this->getManualPingUrl($tb_id); |
140 | 140 | break; |
141 | + | |
142 | + case 'sendpinglink': | |
143 | + echo $manager->addTicketToUrl($CONF['PluginURL'] . 'trackback/index.php?action=ping&id=' . intval($tb_id)); | |
144 | + break; | |
141 | 145 | |
142 | 146 | // Insert TrackBack count |
143 | 147 | case 'count': |
@@ -216,7 +220,7 @@ | ||
216 | 220 | */ |
217 | 221 | function doAction($type) |
218 | 222 | { |
219 | - global $CONF; | |
223 | + global $CONF,$manager; | |
220 | 224 | switch ($type) { |
221 | 225 | |
222 | 226 | // When no action type is given, assume it's a ping |
@@ -232,7 +236,6 @@ | ||
232 | 236 | // Manual ping |
233 | 237 | case 'ping': |
234 | 238 | $errorMsg = $this->handlePing(); |
235 | - | |
236 | 239 | if ($errorMsg != '') |
237 | 240 | $this->showManualPingError(intRequestVar('tb_id'), $errorMsg); |
238 | 241 | else |
@@ -257,6 +260,8 @@ | ||
257 | 260 | |
258 | 261 | // Detect trackback |
259 | 262 | case 'detect': |
263 | + if (!$manager->checkTicket()) return ''; | |
264 | + | |
260 | 265 | list($url, $title) = |
261 | 266 | $this->getURIfromLink(html_entity_decode(requestVar('tb_link'))); |
262 | 267 |
@@ -281,6 +286,8 @@ | ||
281 | 286 | |
282 | 287 | // delete a trackback(local) |
283 | 288 | case 'deletelc': |
289 | + if (!$manager->checkTicket()) return _ERROR_BADTICKET; | |
290 | + | |
284 | 291 | $err = $this->deleteLocal(intRequestVar('tb_id'), intRequestVar('from_id')); |
285 | 292 | if( $err ) |
286 | 293 | return $err; |
@@ -433,8 +440,10 @@ | ||
433 | 440 | ); |
434 | 441 | |
435 | 442 | if ($member->isLoggedIn() && $member->isAdmin()){ |
436 | - $gVars['admin'] = '<a href="' . $CONF['PluginURL'] . 'trackback/index.php?action=list&id=' . intval($tb_id) . '" target="_blank">[admin]</a>'; | |
437 | - $gVars['pingform'] = '<a href="' . $CONF['PluginURL'] . 'trackback/index.php?action=ping&id=' . intval($tb_id) . '" target="_blank">[pingform]</a>'; | |
443 | + $adminurl = $manager->addTicketToUrl($CONF['PluginURL'] . 'trackback/index.php?action=list&id=' . intval($tb_id)); | |
444 | + $pingformurl = $manager->addTicketToUrl($CONF['PluginURL'] . 'trackback/index.php?action=ping&id=' . intval($tb_id)); | |
445 | + $gVars['admin'] = '<a href="' . $adminurl . '" target="_blank">[admin]</a>'; | |
446 | + $gVars['pingform'] = '<a href="' . $pingformurl . '" target="_blank">[pingform]</a>'; | |
438 | 447 | } |
439 | 448 | |
440 | 449 | echo TEMPLATE::fill($this->getOption('tplHeader'), $gVars); |
@@ -1025,7 +1034,7 @@ | ||
1025 | 1034 | 'live' => true, |
1026 | 1035 | |
1027 | 1036 | /* Backwards compatibility with SpamCheck API 1*/ |
1028 | - 'data' => $url . ' ' . $title . ' ' . $excerpt . ' ' . $blog_name, | |
1037 | + 'data' => $url . "\n" . $title . "\n" . $excerpt . "\n" . $blog_name . "\n" . serverVar('HTTP_USER_AGENT'), | |
1029 | 1038 | 'ipblock' => true, |
1030 | 1039 | ); |
1031 | 1040 |
@@ -1221,8 +1230,7 @@ | ||
1221 | 1230 | |
1222 | 1231 | function getRequiredURL($itemid){ |
1223 | 1232 | global $manager; |
1224 | -// $blog = & $manager->getBlog(getBlogIDFromItemID($item['itemid'])); | |
1225 | - $blog = & $manager->getBlog(getBlogIDFromItemID($itemid)); | |
1233 | + $blog = & $manager->getBlog(getBlogIDFromItemID($item['itemid'])); | |
1226 | 1234 | if( $this->isEnableLinkCheck($itemid) ) |
1227 | 1235 | return $this->_createItemLink($itemid, $blog); |
1228 | 1236 | return null; |
@@ -2512,7 +2520,7 @@ function _strip_controlchar($string){ | ||
2512 | 2520 | * Show the list of TrackBack pings for a certain Trackback ID |
2513 | 2521 | */ |
2514 | 2522 | function showLocalList($tb_id) { |
2515 | - global $CONF; | |
2523 | + global $CONF, $manager; | |
2516 | 2524 | |
2517 | 2525 | // create SQL query |
2518 | 2526 | $query = 'SELECT t.from_id as from_id , i.ititle as ititle, i.ibody as ibody, i.itime as itime, i.iblog as iblog FROM '.sql_table('plugin_tb_lc').' as t, '.sql_table('item').' as i WHERE t.tb_id='.intval($tb_id) .' and i.inumber=t.from_id ORDER BY i.itime DESC'; |
@@ -2539,7 +2547,7 @@ function _strip_controlchar($string){ | ||
2539 | 2547 | 'timestamp' => strftime('%Y-%m-%d',strtotime($o->itime)), |
2540 | 2548 | 'title' => htmlspecialchars($o->ititle), |
2541 | 2549 | 'excerpt' => htmlspecialchars(shorten(strip_tags($o->ibody),200,'...')), |
2542 | - 'delete' => $canDelete?'<a href="'.$CONF['ActionURL'].'?action=plugin&name=TrackBack&type=deletelc&tb_id='.$tb_id.'&from_id='.$o->from_id.'">[delete]</a>':'', | |
2550 | + 'delete' => $canDelete?'<a href="'. $manager->addTicketToUrl($CONF['ActionURL'].'?action=plugin&name=TrackBack&type=deletelc&tb_id='.intval($tb_id).'&from_id='.intval($o->from_id)).'">[delete]</a>':'', | |
2543 | 2551 | 'tburl' => $this->getTrackBackUrl($tb_id), |
2544 | 2552 | 'commentcount'=> quickQuery('SELECT COUNT(*) as result FROM '.sql_table('comment').' WHERE citem=' . intval($o->from_id)) |
2545 | 2553 | ); |
@@ -2562,7 +2570,7 @@ function _strip_controlchar($string){ | ||
2562 | 2570 | function canDelete($tb_id) { |
2563 | 2571 | global $member, $manager; |
2564 | 2572 | |
2565 | - if (!$member->isLoggedIn()) return 0; | |
2573 | + if ( ! $member->isLoggedIn() ) return 0; | |
2566 | 2574 | |
2567 | 2575 | $checkIDs = $this->getOption('CheckIDs'); |
2568 | 2576 | $itemExists =& $manager->existsItem($tb_id,0,0); |
@@ -2583,7 +2591,7 @@ function _strip_controlchar($string){ | ||
2583 | 2591 | function getName() { return 'TrackBack'; } |
2584 | 2592 | function getAuthor() { return 'rakaz + nakahara21 + hsur'; } |
2585 | 2593 | function getURL() { return 'http://blog.cles.jp/np_cles/category/31/subcatid/3'; } |
2586 | - function getVersion() { return '2.0.3 jp6'; } | |
2594 | + function getVersion() { return '2.0.3 jp7'; } | |
2587 | 2595 | function getDescription() { return _TB_DESCRIPTION; } |
2588 | 2596 | |
2589 | 2597 | //modify start+++++++++ |
@@ -1,14 +1,14 @@ | ||
1 | 1 | <?php |
2 | - | |
3 | 2 | $strRel = '../../../'; |
4 | 3 | include($strRel . 'config.php'); |
4 | + | |
5 | + global $manager, $CONF; | |
6 | + $action = $manager->addTicketToUrl($CONF['ActionURL'] . '?action=plugin&name=TrackBack&type=detect') | |
5 | 7 | ?> |
6 | - | |
7 | - var TrackbackAction = "<?php echo $CONF['ActionURL'];?>"; | |
8 | 8 | var xmlhttp = false; |
9 | 9 | var inProgress = false; |
10 | 10 | |
11 | - var TrackbackAction = "<?php echo $CONF['ActionURL'];?>"; | |
11 | + var TrackbackAction = "<?php echo $action; ?>"; | |
12 | 12 | var TrackbackSource = new Array; |
13 | 13 | var TrackbackName = new Array; |
14 | 14 | var TrackbackURL = new Array; |
@@ -61,7 +61,7 @@ | ||
61 | 61 | // The reason we use GET instead of POST is because |
62 | 62 | // Opera does not properly support setting headers yet, |
63 | 63 | // which is a requirement for using POST. |
64 | - xmlhttp.open("GET", TrackbackAction + "?action=plugin&name=TrackBack&type=detect&tb_link=" + escape(Lookup), true); | |
64 | + xmlhttp.open("GET", TrackbackAction + "&tb_link=" + escape(Lookup), true); | |
65 | 65 | xmlhttp.onreadystatechange = tbStateChange; |
66 | 66 | xmlhttp.send(''); |
67 | 67 | } |
@@ -125,6 +125,10 @@ div.tb div.info { | ||
125 | 125 | <h3>日本語版更新履歴</h3> |
126 | 126 | |
127 | 127 | <ul> |
128 | + <li>Version 2.0.3jp7 : (2006/*/*)</li> | |
129 | + <li> [Changed] SpamChekについて微調整</li> | |
130 | + <li> [Fixed] セキュリティの向上(ticket処理の追加。CSRF対策)</li> | |
131 | + | |
128 | 132 | <li>Version 2.0.3jp6 : (2006/09/30)</li> |
129 | 133 | <li> [Fixed] セキュリティの向上</li> |
130 | 134 |
@@ -135,7 +139,7 @@ div.tb div.info { | ||
135 | 139 | <li> [Changed] SQLのクォートを"から'に変更</li> |
136 | 140 | <li> [Fixed] mb_emulator環境にてエラーが出る問題を修正</li> |
137 | 141 | <li> [Fixed] curlが有効な環境でエラーが出る問題を修正</li> |
138 | - | |
142 | + | |
139 | 143 | <li>Version 2.0.3jp4 : (2006/07/15)</li> |
140 | 144 | <li> [Added] AutoDiscoveryURL出力時にSpamCheckを行うようにした</li> |
141 | 145 | <li> [Added] メッセージ、デフォルト値を日本語化</li> |
@@ -125,6 +125,10 @@ div.tb div.info { | ||
125 | 125 | <h3>日本語版更新履歴</h3> |
126 | 126 | |
127 | 127 | <ul> |
128 | + <li>Version 2.0.3jp7 : (2006/*/*)</li> | |
129 | + <li> [Changed] SpamChekについて微調整</li> | |
130 | + <li> [Fixed] セキュリティの向上(ticket処理の追加。CSRF対策)</li> | |
131 | + | |
128 | 132 | <li>Version 2.0.3jp6 : (2006/09/30)</li> |
129 | 133 | <li> [Fixed] セキュリティの向上</li> |
130 | 134 |
@@ -7,3 +7,5 @@ do | ||
7 | 7 | eucfile=`echo $utf8file | sed 's/japanese-utf8/japanese-euc/'` |
8 | 8 | nkf -e -W -d < $utf8file > $eucfile |
9 | 9 | done |
10 | + | |
11 | +nkf -e -W -d < japanese-utf8.help.html > japanese-euc.help.html |