app.py 120 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394139513961397139813991400140114021403140414051406140714081409141014111412141314141415141614171418141914201421142214231424142514261427142814291430143114321433143414351436143714381439144014411442144314441445144614471448144914501451145214531454145514561457145814591460146114621463146414651466146714681469147014711472147314741475147614771478147914801481148214831484148514861487148814891490149114921493149414951496149714981499150015011502150315041505150615071508150915101511151215131514151515161517151815191520152115221523152415251526152715281529153015311532153315341535153615371538153915401541154215431544154515461547154815491550155115521553155415551556155715581559156015611562156315641565156615671568156915701571157215731574157515761577157815791580158115821583158415851586158715881589159015911592159315941595159615971598159916001601160216031604160516061607160816091610161116121613161416151616161716181619162016211622162316241625162616271628162916301631163216331634163516361637163816391640164116421643164416451646164716481649165016511652165316541655165616571658165916601661166216631664166516661667166816691670167116721673167416751676167716781679168016811682168316841685168616871688168916901691169216931694169516961697169816991700170117021703170417051706170717081709171017111712171317141715171617171718171917201721172217231724172517261727172817291730173117321733173417351736173717381739174017411742174317441745174617471748174917501751175217531754175517561757175817591760176117621763176417651766176717681769177017711772177317741775177617771778177917801781178217831784178517861787178817891790179117921793179417951796179717981799180018011802180318041805180618071808180918101811181218131814181518161817181818191820182118221823182418251826182718281829183018311832183318341835183618371838183918401841184218431844184518461847184818491850185118521853185418551856185718581859186018611862186318641865186618671868186918701871187218731874187518761877187818791880188118821883188418851886188718881889189018911892189318941895189618971898189919001901190219031904190519061907190819091910191119121913191419151916191719181919192019211922192319241925192619271928192919301931193219331934193519361937193819391940194119421943194419451946194719481949195019511952195319541955195619571958195919601961196219631964196519661967196819691970197119721973197419751976197719781979198019811982198319841985198619871988198919901991199219931994199519961997199819992000200120022003200420052006200720082009201020112012201320142015201620172018201920202021202220232024202520262027202820292030203120322033203420352036203720382039204020412042204320442045204620472048204920502051205220532054205520562057205820592060206120622063206420652066206720682069207020712072207320742075207620772078207920802081208220832084208520862087208820892090209120922093209420952096209720982099210021012102210321042105210621072108210921102111211221132114211521162117211821192120212121222123212421252126212721282129213021312132213321342135213621372138213921402141214221432144214521462147214821492150215121522153215421552156215721582159216021612162216321642165216621672168216921702171217221732174217521762177217821792180218121822183218421852186218721882189219021912192219321942195219621972198219922002201220222032204220522062207220822092210221122122213221422152216221722182219222022212222222322242225222622272228222922302231223222332234223522362237223822392240224122422243224422452246224722482249225022512252225322542255
  1. from flask import Flask, request, session, render_template, send_file
  2. from werkzeug import secure_filename
  3. app = Flask(__name__)
  4. from urllib import parse
  5. import json
  6. import pymysql
  7. import time
  8. import re
  9. import bcrypt
  10. import os
  11. import difflib
  12. json_data = open('set.json').read()
  13. data = json.loads(json_data)
  14. print('오픈나무 시작 포트 : ' + data['port'])
  15. import logging
  16. log = logging.getLogger('werkzeug')
  17. log.setLevel(logging.ERROR)
  18. app.config['MAX_CONTENT_LENGTH'] = int(data['upload']) * 1024 * 1024
  19. conn = pymysql.connect(host = data['host'], user = data['user'], password = data['pw'], db = data['db'], charset = 'utf8mb4')
  20. curs = conn.cursor(pymysql.cursors.DictCursor)
  21. app.secret_key = data['key']
  22. ALLOWED_EXTENSIONS = set(['png', 'jpg', 'jpeg', 'gif'])
  23. def show_diff(seqm):
  24. output= []
  25. for opcode, a0, a1, b0, b1 in seqm.get_opcodes():
  26. if opcode == 'equal':
  27. output.append(seqm.a[a0:a1])
  28. elif opcode == 'insert':
  29. output.append("<span style='background:#CFC;'>" + seqm.b[b0:b1] + "</span>")
  30. elif opcode == 'delete':
  31. output.append("<span style='background:#FDD;'>" + seqm.a[a0:a1] + "</span>")
  32. return ''.join(output)
  33. def allowed_file(filename):
  34. return '.' in filename and \
  35. filename.rsplit('.', 1)[1] in ALLOWED_EXTENSIONS
  36. def admincheck():
  37. if(session.get('Now') == True):
  38. ip = getip(request)
  39. curs.execute("select * from user where id = '" + pymysql.escape_string(ip) + "'")
  40. rows = curs.fetchall()
  41. if(rows):
  42. if(rows[0]['acl'] == 'owner' or rows[0]['acl'] == 'admin'):
  43. return 1
  44. def namumark(title, data):
  45. data = re.sub('<', '&lt;', data)
  46. data = re.sub('>', '&gt;', data)
  47. data = re.sub('"', '&quot;', data)
  48. while True:
  49. m = re.search("\[include\((((?!\)\]).)*)\)\]", data)
  50. if(m):
  51. results = m.groups()
  52. if(results[0] == title):
  53. data = re.sub("\[include\((((?!\)\]).)*)\)\]", "<b>" + results[0] + "</b>", data, 1)
  54. else:
  55. curs.execute("select * from data where title = '" + pymysql.escape_string(results[0]) + "'")
  56. rows = curs.fetchall()
  57. if(rows):
  58. enddata = rows[0]['data']
  59. enddata = re.sub("\[include\((((?!\)\]).)*)\)\]", "", enddata)
  60. enddata = re.sub('<', '&lt;', enddata)
  61. enddata = re.sub('>', '&gt;', enddata)
  62. enddata = re.sub('"', '&quot;', enddata)
  63. data = re.sub("\[include\((((?!\)\]).)*)\)\]", enddata, data, 1)
  64. else:
  65. data = re.sub("\[include\((((?!\)\]).)*)\)\]", "[[" + results[0] + "]]", data, 1)
  66. else:
  67. break
  68. while True:
  69. m = re.search('^#(?:redirect|넘겨주기)\s([^\n]*)', data)
  70. if(m):
  71. results = m.groups()
  72. data = re.sub('^#(?:redirect|넘겨주기)\s([^\n]*)', '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(results[0]).replace('/','%2F') + '/redirect/' + parse.quote(title).replace('/','%2F') + '" />', data, 1)
  73. else:
  74. break
  75. data = '\n' + data + '\n'
  76. while True:
  77. m = re.search("\n&gt;\s?((?:[^\n]*)(?:(?:(?:(?:\n&gt;\s?)(?:[^\n]*))+)?))", data)
  78. if(m):
  79. result = m.groups()
  80. blockquote = result[0]
  81. blockquote = re.sub("\n&gt;\s?", "\n", blockquote)
  82. data = re.sub("\n&gt;\s?((?:[^\n]*)(?:(?:(?:(?:\n&gt;\s?)(?:[^\n]*))+)?))", "\n<blockquote>" + blockquote + "</blockquote>", data, 1)
  83. else:
  84. break
  85. h0c = 0;
  86. h1c = 0;
  87. h2c = 0;
  88. h3c = 0;
  89. h4c = 0;
  90. h5c = 0;
  91. last = 0;
  92. rtoc = '<div id="toc"><span id="toc-name">목차</span><br><br>'
  93. while True:
  94. m = re.search('(={1,6})\s?([^=]*)\s?(?:={1,6})(?:\s+)?\n', data)
  95. if(m):
  96. result = m.groups()
  97. wiki = len(result[0])
  98. if(last < wiki):
  99. last = wiki
  100. else:
  101. last = wiki;
  102. if(wiki == 1):
  103. h1c = 0
  104. h2c = 0
  105. h3c = 0
  106. h4c = 0
  107. h5c = 0
  108. elif(wiki == 2):
  109. h2c = 0
  110. h3c = 0
  111. h4c = 0
  112. h5c = 0
  113. elif(wiki == 3):
  114. h3c = 0
  115. h4c = 0
  116. h5c = 0
  117. elif(wiki == 4):
  118. h4c = 0
  119. h5c = 0
  120. elif(wiki == 5):
  121. h5c = 0
  122. if(wiki == 1):
  123. h0c = h0c + 1
  124. elif(wiki == 2):
  125. h1c = h1c + 1
  126. elif(wiki == 3):
  127. h2c = h2c + 1
  128. elif(wiki == 4):
  129. h3c = h3c + 1
  130. elif(wiki == 5):
  131. h4c = h4c + 1
  132. else:
  133. h5c = h5c + 1
  134. toc = str(h0c) + '.' + str(h1c) + '.' + str(h2c) + '.' + str(h3c) + '.' + str(h4c) + '.' + str(h5c) + '.'
  135. toc = re.sub("(?P<in>[0-9]0(?:[0]*)?)\.", '\g<in>#.', toc)
  136. toc = re.sub("0\.", '', toc)
  137. toc = re.sub("#\.", '.', toc)
  138. toc = re.sub("\.$", '', toc)
  139. rtoc = rtoc + '<a href="#s-' + toc + '">' + toc + '</a>. ' + result[1] + '<br>'
  140. data = re.sub('(={1,6})\s?([^=]*)\s?(?:={1,6})(?:\s+)?\n', '<h' + str(wiki) + '><a href="#toc" id="s-' + toc + '">' + toc + '.</a> ' + result[1] + '</h' + str(wiki) + '>', data, 1);
  141. else:
  142. rtoc = rtoc + '</div>'
  143. break
  144. data = re.sub("\[목차\]", rtoc, data)
  145. data = re.sub("\[\[분류:(((?!\]\]).)*)\]\]", '', data)
  146. while True:
  147. p = re.compile("{{{((?:(?!{{{)(?!}}}).)*)}}}", re.DOTALL)
  148. m = p.search(data)
  149. if(m):
  150. results = m.groups()
  151. q = re.compile("^\+([1-5])\s(.*)$", re.DOTALL)
  152. n = q.search(results[0])
  153. w = re.compile("^\-([1-5])\s(.*)$", re.DOTALL)
  154. a = w.search(results[0])
  155. e = re.compile("^(#[0-9a-f-A-F]{6})\s(.*)$", re.DOTALL)
  156. b = e.search(results[0])
  157. r = re.compile("^(#[0-9a-f-A-F]{3})\s(.*)$", re.DOTALL)
  158. c = r.search(results[0])
  159. t = re.compile("^#(\w+)\s(.*)$", re.DOTALL)
  160. d = t.search(results[0])
  161. qqq = re.compile("^@([0-9a-f-A-F]{6})\s(.*)$", re.DOTALL)
  162. qqe = qqq.search(results[0])
  163. qqw = re.compile("^@([0-9a-f-A-F]{3})\s(.*)$", re.DOTALL)
  164. qqa = qqw.search(results[0])
  165. qwe = re.compile("^@(\w+)\s(.*)$", re.DOTALL)
  166. qsd = qwe.search(results[0])
  167. y = re.compile("^#!wiki\sstyle=&quot;((?:(?!&quot;|\n).)*)&quot;\n?\s\n(.*)$", re.DOTALL)
  168. l = y.search(results[0])
  169. if(n):
  170. result = n.groups()
  171. data = p.sub('<span class="font-size-' + result[0] + '">' + result[1] + '</span>', data, 1)
  172. elif(a):
  173. result = a.groups()
  174. data = p.sub('<span class="font-size-small-' + result[0] + '">' + result[1] + '</span>', data, 1)
  175. elif(b):
  176. result = b.groups()
  177. data = p.sub('<span style="color:' + result[0] + '">' + result[1] + '</span>', data, 1)
  178. elif(c):
  179. result = c.groups()
  180. data = p.sub('<span style="color:' + result[0] + '">' + result[1] + '</span>', data, 1)
  181. elif(d):
  182. result = d.groups()
  183. data = p.sub('<span style="color:' + result[0] + '">' + result[1] + '</span>', data, 1)
  184. elif(qqe):
  185. result = qqe.groups()
  186. data = p.sub('<span style="background:#' + result[0] + '">' + result[1] + '</span>', data, 1)
  187. elif(qqa):
  188. result = qqa.groups()
  189. data = p.sub('<span style="background:#' + result[0] + '">' + result[1] + '</span>', data, 1)
  190. elif(qsd):
  191. result = qsd.groups()
  192. data = p.sub('<span style="background:' + result[0] + '">' + result[1] + '</span>', data, 1)
  193. elif(l):
  194. result = l.groups()
  195. data = p.sub('<div style="' + result[0] + '">' + result[1] + '</div>', data, 1)
  196. else:
  197. data = p.sub(results[0], data, 1)
  198. else:
  199. break
  200. data = re.sub("'''(?P<in>.+?)'''(?!')", '<b>\g<in></b>', data)
  201. data = re.sub("''(?P<in>.+?)''(?!')", '<i>\g<in></i>', data)
  202. data = re.sub('~~(?P<in>.+?)~~(?!~)', '<s>\g<in></s>', data)
  203. data = re.sub('--(?P<in>.+?)--(?!-)', '<s>\g<in></s>', data)
  204. data = re.sub('__(?P<in>.+?)__(?!_)', '<u>\g<in></u>', data)
  205. data = re.sub('\^\^(?P<in>.+?)\^\^(?!\^)', '<sup>\g<in></sup>', data)
  206. data = re.sub(',,(?P<in>.+?),,(?!,)', '<sub>\g<in></sub>', data)
  207. data = re.sub('{{\|(?P<in>(?:(?:(?:(?!\|}}).)*)(?:\n?))+)\|}}', '<table><tbody><tr><td>\g<in></td></tr></tbody></table>', data)
  208. data = re.sub("##\s?(?P<in>[^\n]*)\n", "<div style='display:none;'>\g<in></div>", data);
  209. while True:
  210. m = re.search("\[\[파일:((?:(?!\]\]|\?).)*)(?:\?((?:(?!\]\]).)*))?\]\]", data)
  211. if(m):
  212. c = m.groups()
  213. if(c[1]):
  214. n = re.search("width=([^ \n&]*)", c[1])
  215. e = re.search("height=([^ \n&]*)", c[1])
  216. if(n):
  217. a = n.groups()
  218. width = a[0]
  219. else:
  220. width = ''
  221. if(e):
  222. b = e.groups()
  223. height = b[0]
  224. else:
  225. height = ''
  226. img = re.sub("\.(?P<in>jpg|png|gif|jpeg)", "#\g<in>#", c[0])
  227. data = re.sub("\[\[파일:((?:(?!\]\]|\?).)*)(?:\?((?:(?!\]\]).)*))?\]\]", '<img src="/image/' + img + '" width="' + width + '" height="' + height + '">', data, 1)
  228. else:
  229. img = re.sub("\.(?P<in>jpg|png|gif|jpeg)", "#\g<in>#", c[0])
  230. data = re.sub("\[\[파일:((?:(?!\]\]|\?).)*)(?:\?((?:(?!\]\]).)*))?\]\]", "<img src='/image/" + img + "'>", data, 1)
  231. else:
  232. break
  233. data = re.sub("\[br\]",'<br>', data);
  234. while True:
  235. m = re.search("\[youtube\(((?:(?!,|\)\]).)*)(?:,\s)?(?:width=((?:(?!,|\)\]).)*))?(?:,\s)?(?:height=((?:(?!,|\)\]).)*))?(?:,\s)?(?:width=((?:(?!,|\)\]).)*))?\)\]", data)
  236. if(m):
  237. result = m.groups()
  238. if(result[1]):
  239. if(result[2]):
  240. width = result[1]
  241. height = result[2]
  242. else:
  243. width = result[1]
  244. height = '315'
  245. elif(result[2]):
  246. if(result[3]):
  247. height = result[2]
  248. width = result[3]
  249. else:
  250. height = result[2]
  251. width = '560'
  252. else:
  253. width = '560'
  254. height = '315'
  255. data = re.sub("\[youtube\(((?:(?!,|\)\]).)*)(?:,\s)?(?:width=((?:(?!,|\)\]).)*))?(?:,\s)?(?:height=((?:(?!,|\)\]).)*))?(?:,\s)?(?:width=((?:(?!,|\)\]).)*))?\)\]", '<iframe width="' + width + '" height="' + height + '" src="https://www.youtube.com/embed/' + result[0] + '" frameborder="0" allowfullscreen></iframe>', data, 1)
  256. else:
  257. break
  258. while True:
  259. m = re.search("(http(?:s)?:\/\/(?:(?:(?:(?!\.jpg|\.png|\.gif|\.jpeg|#jpg#|#png#|#gif#|#jpeg#).)*)(?:\.jpg|\.png|\.gif|\.jpeg)))(?:(?:(?:\?)width=((?:[0-9]*)(?:px)?))?(?:(?:\?|&)height=((?:[0-9]*)(?:px)?))?(?:(?:&)width=((?:[0-9]*)(?:px)?))?)?", data)
  260. if(m):
  261. result = m.groups()
  262. if(result[1]):
  263. if(result[2]):
  264. width = result[1]
  265. height = result[2]
  266. else:
  267. width = result[1]
  268. height = ''
  269. elif(result[2]):
  270. if(result[3]):
  271. height = result[2]
  272. width = result[3]
  273. else:
  274. height = result[2]
  275. width = ''
  276. else:
  277. width = ''
  278. height = ''
  279. c = result[0]
  280. c = re.sub("\.(?P<in>jpg|png|gif|jpeg)", "#\g<in>#", c)
  281. data = re.sub("(http(?:s)?:\/\/(?:(?:(?:(?!\.jpg|\.png|\.gif|\.jpeg|#jpg#|#png#|#gif#|#jpeg#).)*)(?:\.jpg|\.png|\.gif|\.jpeg)))(?:(?:(?:\?)width=((?:[0-9]*)(?:px)?))?(?:(?:\?|&)height=((?:[0-9]*)(?:px)?))?(?:(?:&)width=((?:[0-9]*)(?:px)?))?)?", "<img width='" + width + "' height='" + height + "' src='" + c + "'>", data, 1)
  282. else:
  283. break
  284. while True:
  285. m = re.search("\[\[(((?!\]\]).)*)\]\]", data)
  286. if(m):
  287. result = m.groups()
  288. a = re.search("(((?!\|).)*)\|(.*)", result[0])
  289. if(a):
  290. results = a.groups()
  291. b = re.search("^http(?:s)?:\/\/", results[0])
  292. if(b):
  293. c = re.search("(?:\.jpg|\.png|\.gif|\.jpeg)", results[0])
  294. if(c):
  295. img = results[0]
  296. img = re.sub("\.(?P<in>jpg|png|gif|jpeg)", "#\g<in>#", img)
  297. data = re.sub('\[\[(((?!\]\]).)*)\]\]', '<a class="out_link" href="' + img + '">' + results[2] + '</a>', data, 1)
  298. else:
  299. data = re.sub('\[\[(((?!\]\]).)*)\]\]', '<a class="out_link" href="' + results[0] + '">' + results[2] + '</a>', data, 1)
  300. else:
  301. if(results[0] == title):
  302. data = re.sub('\[\[(((?!\]\]).)*)\]\]', '<b>' + results[2] + '</b>', data, 1)
  303. else:
  304. curs.execute("select * from data where title = '" + pymysql.escape_string(results[0]) + "'")
  305. rows = curs.fetchall()
  306. if(rows):
  307. data = re.sub('\[\[(((?!\]\]).)*)\]\]', '<a title="' + results[0] + '" href="/w/' + parse.quote(results[0]).replace('/','%2F') + '">' + results[2] + '</a>', data, 1)
  308. else:
  309. data = re.sub('\[\[(((?!\]\]).)*)\]\]', '<a title="' + results[0] + '" class="not_thing" href="/w/' + parse.quote(results[0]).replace('/','%2F') + '">' + results[2] + '</a>', data, 1)
  310. else:
  311. b = re.search("^http(?:s)?:\/\/", result[0])
  312. if(b):
  313. c = re.search("(?:\.jpg|\.png|\.gif|\.jpeg)", result[0])
  314. if(c):
  315. img = result[0]
  316. img = re.sub("\.(?P<in>jpg|png|gif|jpeg)", "#\g<in>#", img)
  317. data = re.sub('\[\[(((?!\]\]).)*)\]\]', '<a class="out_link" href="' + img + '">' + result[0] + '</a>', data, 1)
  318. else:
  319. data = re.sub('\[\[(((?!\]\]).)*)\]\]', '<a class="out_link" href="' + result[0] + '">' + result[0] + '</a>', data, 1)
  320. else:
  321. if(result[0] == title):
  322. data = re.sub('\[\[(((?!\]\]).)*)\]\]', '<b>' + result[0] + '</b>', data, 1)
  323. else:
  324. curs.execute("select * from data where title = '" + pymysql.escape_string(result[0]) + "'")
  325. rows = curs.fetchall()
  326. if(rows):
  327. data = re.sub('\[\[(((?!\]\]).)*)\]\]', '<a href="/w/' + parse.quote(result[0]).replace('/','%2F') + '">' + result[0] + '</a>', data, 1)
  328. else:
  329. data = re.sub('\[\[(((?!\]\]).)*)\]\]', '<a class="not_thing" href="/w/' + parse.quote(result[0]).replace('/','%2F') + '">' + result[0] + '</a>', data, 1)
  330. else:
  331. break
  332. while True:
  333. m = re.search("((?:(?:\s\*\s[^\n]*)\n?)+)", data)
  334. if(m):
  335. result = m.groups()
  336. end = str(result[0])
  337. end = re.sub("\s\*\s(?P<in>[^\n]*)", "<li>\g<in></li>", end)
  338. end = re.sub("\n", '', end)
  339. data = re.sub("((?:(?:\s\*\s[^\n]*)\n?)+)", '<ul id="list">' + end + '</ul>', data, 1)
  340. else:
  341. break
  342. data = re.sub('\[date\]', getnow(), data)
  343. data = re.sub("\[anchor\((?P<in>[^\[\]]*)\)\]", '<span id="\g<in>"></span>', data)
  344. data = re.sub("#(?P<in>jpg|png|gif|jpeg)#", ".\g<in>", data)
  345. data = re.sub("-{4,11}", "<hr>", data)
  346. while True:
  347. b = re.search("\r\n( +)", data)
  348. if(b):
  349. result = b.groups()
  350. tp = len(result[0])
  351. up = ''
  352. i = 0
  353. while True:
  354. up = up + '<span id="in"></span>'
  355. i = i + 1
  356. if(i == tp):
  357. break
  358. data = re.sub("\r\n( +)", '<br>' + up, data, 1)
  359. else:
  360. break
  361. a = 1
  362. tou = "<hr id='footnote'><div class='wiki-macro-footnote'><br>"
  363. while True:
  364. b = re.search("\[\*([^\s]*)\s(((?!\]).)*)\]", data)
  365. if(b):
  366. results = b.groups()
  367. if(results[0]):
  368. c = results[1]
  369. c = re.sub("<(?:[^>]*)>", '', c)
  370. tou = tou + "<span class='footnote-list'><a href=\"#rfn-" + str(a) + "\" id=\"fn-" + str(a) + "\">[" + results[0] + "]</a> " + results[1] + "</span><br>"
  371. data = re.sub("\[\*([^\s]*)\s(((?!\]).)*)\]", "<sup><a class=\"footnotes\" title=\"" + c + "\" id=\"rfn-" + str(a) + "\" href=\"#fn-" + str(a) + "\">[" + results[0] + "]</a></sup>", data, 1)
  372. else:
  373. c = results[1]
  374. c = re.sub("<(?:[^>]*)>", '', c)
  375. tou = tou + "<span class='footnote-list'><a href=\"#rfn-" + str(a) + "\" id=\"fn-" + str(a) + "\">[" + str(a) + "]</a> " + results[1] + "</span><br>"
  376. data = re.sub("\[\*([^\s]*)\s(((?!\]).)*)\]", '<sup><a class="footnotes" title="' + c + '" id="rfn-' + str(a) + '" href="#fn-' + str(a) + '">[' + str(a) + ']</a></sup>', data, 1)
  377. a = a + 1
  378. else:
  379. tou = tou + '</div>'
  380. if(tou == "<hr id='footnote'><div class='wiki-macro-footnote'><br></div>"):
  381. tou = ""
  382. break
  383. data = re.sub("\[각주\](?:(?:(?:<br>+)*(?:\s+)*(?:\r+)*(?:\n+))+)?$", "", data)
  384. data = re.sub("\[각주\]", "<br>" + tou, data)
  385. data = data + tou;
  386. while True:
  387. m = re.search("(\|\|(?:(?:(?:.*)\n?)\|\|)+)", data)
  388. if(m):
  389. results = m.groups()
  390. table = results[0]
  391. while True:
  392. a = re.search("^(\|\|(?:(?:\|\|)+)?)((?:&lt;(?:(?:(?!&gt;).)*)&gt;)+)?", table)
  393. if(a):
  394. row = ''
  395. cel = ''
  396. celstyle = ''
  397. rowstyle = ''
  398. alltable = ''
  399. result = a.groups()
  400. if(result[1]):
  401. q = re.search("&lt;table\s?width=((?:(?!&gt;).)*)&gt;", result[1])
  402. w = re.search("&lt;table\s?height=((?:(?!&gt;).)*)&gt;", result[1])
  403. e = re.search("&lt;table\s?align=((?:(?!&gt;).)*)&gt;", result[1])
  404. alltable = 'style="'
  405. celstyle = 'style="'
  406. rowstyle = 'style="'
  407. if(q):
  408. resultss = q.groups()
  409. alltable = alltable + 'width:' + resultss[0] + ';'
  410. if(w):
  411. resultss = w.groups()
  412. alltable = alltable + 'height:' + resultss[0] + ';'
  413. if(e):
  414. resultss = e.groups()
  415. if(resultss[0] == 'right'):
  416. alltable = alltable + 'margin-left:auto;'
  417. elif(resultss[0] == 'center'):
  418. alltable = alltable + 'margin:auto;'
  419. else:
  420. alltable = alltable + 'margin-right:auto;'
  421. ee = re.search("&lt;table\s?textalign=((?:(?!&gt;).)*)&gt;", result[1])
  422. if(ee):
  423. resultss = ee.groups()
  424. if(resultss[0] == 'right'):
  425. alltable = alltable + 'text-align:right;'
  426. elif(resultss[0] == 'center'):
  427. alltable = alltable + 'text-align:center;'
  428. else:
  429. alltable = alltable + 'text-align:left;'
  430. r = re.search("&lt;-((?:(?!&gt;).)*)&gt;", result[1])
  431. if(r):
  432. resultss = r.groups()
  433. cel = 'colspan="' + resultss[0] + '"'
  434. else:
  435. cel = 'colspan="' + str(round(len(result[0]) / 2)) + '"'
  436. t = re.search("&lt;\|((?:(?!&gt;).)*)&gt;", result[1])
  437. if(t):
  438. resultss = t.groups()
  439. row = 'rowspan="' + resultss[0] + '"'
  440. ba = re.search("&lt;rowbgcolor=(#[0-9a-f-A-F]{6})&gt;", result[1])
  441. bb = re.search("&lt;rowbgcolor=(#[0-9a-f-A-F]{3})&gt;", result[1])
  442. bc = re.search("&lt;rowbgcolor=(\w+)&gt;", result[1])
  443. if(ba):
  444. resultss = ba.groups()
  445. rowstyle = rowstyle + 'background:' + resultss[0] + ';'
  446. elif(bb):
  447. resultss = bb.groups()
  448. rowstyle = rowstyle + 'background:' + resultss[0] + ';'
  449. elif(bc):
  450. resultss = bc.groups()
  451. rowstyle = rowstyle + 'background:' + resultss[0] + ';'
  452. z = re.search("&lt;table\s?bordercolor=(#[0-9a-f-A-F]{6})&gt;", result[1])
  453. x = re.search("&lt;table\s?bordercolor=(#[0-9a-f-A-F]{3})&gt;", result[1])
  454. c = re.search("&lt;table\s?bordercolor=(\w+)&gt;", result[1])
  455. if(z):
  456. resultss = z.groups()
  457. alltable = alltable + 'border:' + resultss[0] + ' 2px solid;'
  458. elif(x):
  459. resultss = x.groups()
  460. alltable = alltable + 'border:' + resultss[0] + ' 2px solid;'
  461. elif(c):
  462. resultss = c.groups()
  463. alltable = alltable + 'border:' + resultss[0] + ' 2px solid;'
  464. aq = re.search("&lt;table\s?bgcolor=(#[0-9a-f-A-F]{6})&gt;", result[1])
  465. aw = re.search("&lt;table\s?bgcolor=(#[0-9a-f-A-F]{3})&gt;", result[1])
  466. ae = re.search("&lt;table\s?bgcolor=(\w+)&gt;", result[1])
  467. if(aq):
  468. resultss = aq.groups()
  469. alltable = alltable + 'background:' + resultss[0] + ';'
  470. elif(aw):
  471. resultss = aw.groups()
  472. alltable = alltable + 'background:' + resultss[0] + ';'
  473. elif(ae):
  474. resultss = ae.groups()
  475. alltable = alltable + 'background:' + resultss[0] + ';'
  476. j = re.search("&lt;bgcolor=(#[0-9a-f-A-F]{6})&gt;", result[1])
  477. k = re.search("&lt;bgcolor=(#[0-9a-f-A-F]{3})&gt;", result[1])
  478. l = re.search("&lt;bgcolor=(\w+)&gt;", result[1])
  479. if(j):
  480. resultss = j.groups()
  481. celstyle = celstyle + 'background:' + resultss[0] + ';'
  482. elif(k):
  483. resultss = k.groups()
  484. celstyle = celstyle + 'background:' + resultss[0] + ';'
  485. elif(l):
  486. resultss = l.groups()
  487. celstyle = celstyle + 'background:' + resultss[0] + ';'
  488. aa = re.search("&lt;(#[0-9a-f-A-F]{6})&gt;", result[1])
  489. ab = re.search("&lt;(#[0-9a-f-A-F]{3})&gt;", result[1])
  490. ac = re.search("&lt;(\w+)&gt;", result[1])
  491. if(aa):
  492. resultss = aa.groups()
  493. celstyle = celstyle + 'background:' + resultss[0] + ';'
  494. elif(ab):
  495. resultss = ab.groups()
  496. celstyle = celstyle + 'background:' + resultss[0] + ';'
  497. elif(ac):
  498. resultss = ac.groups()
  499. celstyle = celstyle + 'background:' + resultss[0] + ';'
  500. qa = re.search("&lt;width=((?:(?!&gt;).)*)&gt;", result[1])
  501. qb = re.search("&lt;height=((?:(?!&gt;).)*)&gt;", result[1])
  502. if(qa):
  503. resultss = qa.groups()
  504. celstyle = celstyle + 'width:' + resultss[0] + ';'
  505. if(qb):
  506. resultss = qb.groups()
  507. celstyle = celstyle + 'height:' + resultss[0] + ';'
  508. i = re.search("&lt;\)&gt;", result[1])
  509. o = re.search("&lt;:&gt;", result[1])
  510. p = re.search("&lt;\(&gt;", result[1])
  511. if(i):
  512. celstyle = celstyle + 'text-align:right;'
  513. elif(o):
  514. celstyle = celstyle + 'text-align:center;'
  515. elif(p):
  516. celstyle = celstyle + 'text-align:left;'
  517. alltable = alltable + '"'
  518. celstyle = celstyle + '"'
  519. rowstyle = rowstyle + '"'
  520. table = re.sub("^(\|\|(?:(?:\|\|)+)?)((?:&lt;(?:(?:(?!&gt;).)*)&gt;)+)?", "<table " + alltable + "><tbody><tr " + rowstyle + "><td " + cel + " " + row + " " + celstyle + ">", table, 1)
  521. else:
  522. cel = 'colspan="' + str(round(len(result[0]) / 2)) + '"'
  523. table = re.sub("^(\|\|(?:(?:\|\|)+)?)((?:&lt;(?:(?:(?!&gt;).)*)&gt;)+)?", "<table><tbody><tr><td " + cel + ">", table, 1)
  524. else:
  525. break
  526. table = re.sub("\|\|$", "</td></tr></tbody></table>", table)
  527. while True:
  528. b = re.search("\|\|\r\n(\|\|(?:(?:\|\|)+)?)((?:&lt;(?:(?:(?!&gt;).)*)&gt;)+)?", table)
  529. if(b):
  530. row = ''
  531. cel = ''
  532. celstyle = ''
  533. rowstyle = ''
  534. result = b.groups()
  535. if(result[1]):
  536. celstyle = 'style="'
  537. rowstyle = 'style="'
  538. r = re.search("&lt;-((?:(?!&gt;).)*)&gt;", result[1])
  539. if(r):
  540. resultss = r.groups()
  541. cel = 'colspan="' + resultss[0] + '"'
  542. else:
  543. cel = 'colspan="' + str(round(len(result[0]) / 2)) + '"'
  544. t = re.search("&lt;\|((?:(?!&gt;).)*)&gt;", result[1])
  545. if(t):
  546. resultss = t.groups()
  547. row = 'rowspan="' + resultss[0] + '"'
  548. ba = re.search("&lt;rowbgcolor=(#[0-9a-f-A-F]{6})&gt;", result[1])
  549. bb = re.search("&lt;rowbgcolor=(#[0-9a-f-A-F]{3})&gt;", result[1])
  550. bc = re.search("&lt;rowbgcolor=(\w+)&gt;", result[1])
  551. if(ba):
  552. resultss = ba.groups()
  553. rowstyle = rowstyle + 'background:' + resultss[0] + ';'
  554. elif(bb):
  555. resultss = bb.groups()
  556. rowstyle = rowstyle + 'background:' + resultss[0] + ';'
  557. elif(bc):
  558. resultss = bc.groups()
  559. rowstyle = rowstyle + 'background:' + resultss[0] + ';'
  560. j = re.search("&lt;bgcolor=(#[0-9a-f-A-F]{6})&gt;", result[1])
  561. k = re.search("&lt;bgcolor=(#[0-9a-f-A-F]{3})&gt;", result[1])
  562. l = re.search("&lt;bgcolor=(\w+)&gt;", result[1])
  563. if(j):
  564. resultss = j.groups()
  565. celstyle = celstyle + 'background:' + resultss[0] + ';'
  566. elif(k):
  567. resultss = k.groups()
  568. celstyle = celstyle + 'background:' + resultss[0] + ';'
  569. elif(l):
  570. resultss = l.groups()
  571. celstyle = celstyle + 'background:' + resultss[0] + ';'
  572. aa = re.search("&lt;(#[0-9a-f-A-F]{6})&gt;", result[1])
  573. ab = re.search("&lt;(#[0-9a-f-A-F]{3})&gt;", result[1])
  574. ac = re.search("&lt;(\w+)&gt;", result[1])
  575. if(aa):
  576. resultss = aa.groups()
  577. celstyle = celstyle + 'background:' + resultss[0] + ';'
  578. elif(ab):
  579. resultss = ab.groups()
  580. celstyle = celstyle + 'background:' + resultss[0] + ';'
  581. elif(ac):
  582. resultss = ac.groups()
  583. celstyle = celstyle + 'background:' + resultss[0] + ';'
  584. qa = re.search("&lt;width=((?:(?!&gt;).)*)&gt;", result[1])
  585. qb = re.search("&lt;height=((?:(?!&gt;).)*)&gt;", result[1])
  586. if(qa):
  587. resultss = qa.groups()
  588. celstyle = celstyle + 'width:' + resultss[0] + ';'
  589. if(qb):
  590. resultss = qb.groups()
  591. celstyle = celstyle + 'height:' + resultss[0] + ';'
  592. i = re.search("&lt;\)&gt;", result[1])
  593. o = re.search("&lt;:&gt;", result[1])
  594. p = re.search("&lt;\(&gt;", result[1])
  595. if(i):
  596. celstyle = celstyle + 'text-align:right;'
  597. elif(o):
  598. celstyle = celstyle + 'text-align:center;'
  599. elif(p):
  600. celstyle = celstyle + 'text-align:left;'
  601. celstyle = celstyle + '"'
  602. rowstyle = rowstyle + '"'
  603. table = re.sub("\|\|\r\n(\|\|(?:(?:\|\|)+)?)((?:&lt;(?:(?:(?!&gt;).)*)&gt;)+)?", "</td></tr><tr " + rowstyle + "><td " + cel + " " + row + " " + celstyle + ">", table, 1)
  604. else:
  605. cel = 'colspan="' + str(round(len(result[0]) / 2)) + '"'
  606. table = re.sub("\|\|\r\n(\|\|(?:(?:\|\|)+)?)((?:&lt;(?:(?:(?!&gt;).)*)&gt;)+)?", "</td></tr><tr><td " + cel + ">", table, 1)
  607. else:
  608. break
  609. while True:
  610. c = re.search("(\|\|(?:(?:\|\|)+)?)((?:&lt;(?:(?:(?!&gt;).)*)&gt;)+)?", table)
  611. if(c):
  612. row = ''
  613. cel = ''
  614. celstyle = ''
  615. result = c.groups()
  616. if(result[1]):
  617. celstyle = 'style="'
  618. r = re.search("&lt;-((?:(?!&gt;).)*)&gt;", result[1])
  619. if(r):
  620. resultss = r.groups()
  621. cel = 'colspan="' + resultss[0] + '"';
  622. else:
  623. cel = 'colspan="' + str(round(len(result[0]) / 2)) + '"'
  624. t = re.search("&lt;\|((?:(?!&gt;).)*)&gt;", result[1])
  625. if(t):
  626. resultss = t.groups()
  627. row = 'rowspan="' + resultss[0] + '"';
  628. j = re.search("&lt;bgcolor=(#[0-9a-f-A-F]{6})&gt;", result[1])
  629. k = re.search("&lt;bgcolor=(#[0-9a-f-A-F]{3})&gt;", result[1])
  630. l = re.search("&lt;bgcolor=(\w+)&gt;", result[1])
  631. if(j):
  632. resultss = j.groups()
  633. celstyle = celstyle + 'background:' + resultss[0] + ';'
  634. elif(k):
  635. resultss = k.groups()
  636. celstyle = celstyle + 'background:' + resultss[0] + ';'
  637. elif(l):
  638. resultss = l.groups()
  639. celstyle = celstyle + 'background:' + resultss[0] + ';'
  640. aa = re.search("&lt;(#[0-9a-f-A-F]{6})&gt;", result[1])
  641. ab = re.search("&lt;(#[0-9a-f-A-F]{3})&gt;", result[1])
  642. ac = re.search("&lt;(\w+)&gt;", result[1])
  643. if(aa):
  644. resultss = aa.groups()
  645. celstyle = celstyle + 'background:' + resultss[0] + ';'
  646. elif(ab):
  647. resultss = ab.groups()
  648. celstyle = celstyle + 'background:' + resultss[0] + ';'
  649. elif(ac):
  650. resultss = ac.groups()
  651. celstyle = celstyle + 'background:' + resultss[0] + ';'
  652. qa = re.search("&lt;width=((?:(?!&gt;).)*)&gt;", result[1])
  653. qb = re.search("&lt;height=((?:(?!&gt;).)*)&gt;", result[1])
  654. if(qa):
  655. resultss = qa.groups()
  656. celstyle = celstyle + 'width:' + resultss[0] + ';'
  657. if(qb):
  658. resultss = qb.groups()
  659. celstyle = celstyle + 'height:' + resultss[0] + ';'
  660. i = re.search("&lt;\)&gt;", result[1])
  661. o = re.search("&lt;:&gt;", result[1])
  662. p = re.search("&lt;\(&gt;", result[1])
  663. if(i):
  664. celstyle = celstyle + 'text-align:right;'
  665. elif(o):
  666. celstyle = celstyle + 'text-align:center;'
  667. elif(p):
  668. celstyle = celstyle + 'text-align:left;'
  669. celstyle = celstyle + '"'
  670. table = re.sub("(\|\|(?:(?:\|\|)+)?)((?:&lt;(?:(?:(?!&gt;).)*)&gt;)+)?", "</td><td " + cel + " " + row + " " + celstyle + ">", table, 1)
  671. else:
  672. cel = 'colspan="' + str(round(len(result[0]) / 2)) + '"'
  673. table = re.sub("(\|\|(?:(?:\|\|)+)?)((?:&lt;(?:(?:(?!&gt;).)*)&gt;)+)?", "</td><td " + cel + ">", table, 1)
  674. else:
  675. break
  676. data = re.sub("(\|\|(?:(?:(?:.*)\n?)\|\|)+)", table, data, 1)
  677. else:
  678. break
  679. data = re.sub('\n', '<br>', data)
  680. data = re.sub('^<br>', '', data)
  681. return str(data)
  682. def getip(request):
  683. if(session.get('Now') == True):
  684. ip = format(session['DREAMER'])
  685. else:
  686. if(request.headers.getlist("X-Forwarded-For")):
  687. ip = request.headers.getlist("X-Forwarded-For")[0]
  688. else:
  689. ip = request.remote_addr
  690. return ip
  691. def getcan(ip, name):
  692. m = re.search("^사용자:(.*)", name)
  693. if(m):
  694. g = m.groups()
  695. if(ip == g[0]):
  696. if(re.search("\.", g[0])):
  697. return 1
  698. else:
  699. curs.execute("select * from ban where block = '" + pymysql.escape_string(ip) + "'")
  700. rows = curs.fetchall()
  701. if(rows):
  702. return 1
  703. else:
  704. return 0
  705. else:
  706. return 1
  707. else:
  708. b = re.search("^([0-9](?:[0-9][0-9])?\.[0-9](?:[0-9][0-9])?)", ip)
  709. if(b):
  710. results = b.groups()
  711. curs.execute("select * from ban where block = '" + pymysql.escape_string(results[0]) + "' and band = 'O'")
  712. rowss = curs.fetchall()
  713. if(rowss):
  714. return 1
  715. else:
  716. curs.execute("select * from ban where block = '" + pymysql.escape_string(ip) + "'")
  717. rows = curs.fetchall()
  718. if(rows):
  719. return 1
  720. else:
  721. curs.execute("select * from data where title = '" + pymysql.escape_string(name) + "'")
  722. row = curs.fetchall()
  723. if(row):
  724. curs.execute("select * from user where id = '" + pymysql.escape_string(ip) + "'")
  725. rows = curs.fetchall()
  726. if(row[0]['acl'] == 'user'):
  727. if(rows):
  728. return 0
  729. else:
  730. return 1
  731. elif(row[0]['acl'] == 'admin'):
  732. if(rows):
  733. if(rows[0]['acl'] == 'admin' or rows[0]['acl'] == 'owner'):
  734. return 0
  735. else:
  736. return 1
  737. else:
  738. return 1
  739. else:
  740. return 0
  741. else:
  742. return 0
  743. else:
  744. curs.execute("select * from ban where block = '" + pymysql.escape_string(ip) + "'")
  745. rows = curs.fetchall()
  746. if(rows):
  747. return 1
  748. else:
  749. curs.execute("select * from data where title = '" + pymysql.escape_string(name) + "'")
  750. row = curs.fetchall()
  751. if(row):
  752. curs.execute("select * from user where id = '" + pymysql.escape_string(ip) + "'")
  753. rows = curs.fetchall()
  754. if(row[0]['acl'] == 'user'):
  755. if(rows):
  756. return 0
  757. else:
  758. return 1
  759. elif(row[0]['acl'] == 'admin'):
  760. if(rows):
  761. if(rows[0]['acl'] == 'admin' or rows[0]['acl'] == 'owner'):
  762. return 0
  763. else:
  764. return 1
  765. else:
  766. return 1
  767. else:
  768. return 0
  769. else:
  770. return 0
  771. def getban(ip):
  772. b = re.search("^([0-9](?:[0-9][0-9])?\.[0-9](?:[0-9][0-9])?)", ip)
  773. if(b):
  774. results = b.groups()
  775. curs.execute("select * from ban where block = '" + pymysql.escape_string(results[0]) + "' and band = 'O'")
  776. rowss = curs.fetchall()
  777. if(rowss):
  778. return 1
  779. else:
  780. curs.execute("select * from ban where block = '" + pymysql.escape_string(ip) + "'")
  781. rows = curs.fetchall()
  782. if(rows):
  783. return 1
  784. else:
  785. return 0
  786. else:
  787. curs.execute("select * from ban where block = '" + pymysql.escape_string(ip) + "'")
  788. rows = curs.fetchall()
  789. if(rows):
  790. return 1
  791. else:
  792. return 0
  793. def getdiscuss(ip, name, sub):
  794. b = re.search("^([0-9](?:[0-9][0-9])?\.[0-9](?:[0-9][0-9])?)", ip)
  795. if(b):
  796. results = b.groups()
  797. curs.execute("select * from ban where block = '" + pymysql.escape_string(results[0]) + "' and band = 'O'")
  798. rowss = curs.fetchall()
  799. if(rowss):
  800. return 1
  801. else:
  802. curs.execute("select * from ban where block = '" + pymysql.escape_string(ip) + "'")
  803. rows = curs.fetchall()
  804. if(rows):
  805. return 1
  806. else:
  807. curs.execute("select * from stop where title = '" + pymysql.escape_string(name) + "' and sub = '" + pymysql.escape_string(sub) + "'")
  808. rows = curs.fetchall()
  809. if(rows):
  810. return 1
  811. else:
  812. return 0
  813. else:
  814. curs.execute("select * from ban where block = '" + pymysql.escape_string(ip) + "'")
  815. rows = curs.fetchall()
  816. if(rows):
  817. return 1
  818. else:
  819. curs.execute("select * from stop where title = '" + pymysql.escape_string(name) + "' and sub = '" + pymysql.escape_string(sub) + "'")
  820. rows = curs.fetchall()
  821. if(rows):
  822. return 1
  823. else:
  824. return 0
  825. def getnow():
  826. now = time.localtime()
  827. s = "%04d-%02d-%02d %02d:%02d:%02d" % (now.tm_year, now.tm_mon, now.tm_mday, now.tm_hour, now.tm_min, now.tm_sec)
  828. return s
  829. def discuss(title, sub, date):
  830. curs.execute("select * from rd where title = '" + pymysql.escape_string(title) + "' and sub = '" + pymysql.escape_string(sub) + "'")
  831. rows = curs.fetchall()
  832. if(rows):
  833. curs.execute("update rd set date = '" + pymysql.escape_string(date) + "' where title = '" + pymysql.escape_string(title) + "' and sub = '" + pymysql.escape_string(sub) + "'")
  834. else:
  835. curs.execute("insert into rd (title, sub, date) value ('" + pymysql.escape_string(title) + "', '" + pymysql.escape_string(sub) + "', '" + pymysql.escape_string(date) + "')")
  836. conn.commit()
  837. def block(block, end, today, blocker, why):
  838. curs.execute("insert into rb (block, end, today, blocker, why) value ('" + pymysql.escape_string(block) + "', '" + pymysql.escape_string(end) + "', '" + today + "', '" + pymysql.escape_string(blocker) + "', '" + pymysql.escape_string(why) + "')")
  839. conn.commit()
  840. def history(title, data, date, ip, send, leng):
  841. curs.execute("select * from history where title = '" + pymysql.escape_string(title) + "' order by id+0 desc limit 1")
  842. rows = curs.fetchall()
  843. if(rows):
  844. number = int(rows[0]['id']) + 1
  845. curs.execute("insert into history (id, title, data, date, ip, send, leng) value ('" + str(number) + "', '" + pymysql.escape_string(title) + "', '" + pymysql.escape_string(data) + "', '" + date + "', '" + pymysql.escape_string(ip) + "', '" + pymysql.escape_string(send) + "', '" + leng + "')")
  846. conn.commit()
  847. else:
  848. curs.execute("insert into history (id, title, data, date, ip, send, leng) value ('1', '" + pymysql.escape_string(title) + "', '" + pymysql.escape_string(data) + "', '" + date + "', '" + pymysql.escape_string(ip) + "', '" + pymysql.escape_string(send + ' (새 문서)') + "', '" + leng + "')")
  849. conn.commit()
  850. def getleng(existing, change):
  851. if(existing < change):
  852. leng = change - existing
  853. leng = '+' + str(leng)
  854. elif(change < existing):
  855. leng = existing - change
  856. leng = '-' + str(leng)
  857. else:
  858. leng = '0'
  859. return leng;
  860. @app.route('/upload', methods=['GET', 'POST'])
  861. def upload():
  862. if(request.method == 'POST'):
  863. ip = getip(request)
  864. ban = getban(ip)
  865. if(ban == 1):
  866. return '<meta http-equiv="refresh" content="0;url=/ban" />'
  867. else:
  868. file = request.files['file']
  869. if(file and allowed_file(file.filename)):
  870. filename = secure_filename(file.filename)
  871. if(os.path.exists(os.path.join('image', filename))):
  872. return render_template('index.html', logo = data['name'], title = '업로드', data = '동일한 이름의 파일이 있습니다.')
  873. else:
  874. file.save(os.path.join('image', filename))
  875. return render_template('index.html', logo = data['name'], title = '업로드', data = '완료 되었습니다.')
  876. else:
  877. return render_template('index.html', logo = data['name'], title = '업로드', data = 'jpg gif jpeg png만 가능 합니다.')
  878. else:
  879. ip = getip(request)
  880. ban = getban(ip)
  881. if(ban == 1):
  882. return '<meta http-equiv="refresh" content="0;url=/ban" />'
  883. else:
  884. return render_template('index.html', logo = data['name'], title = '업로드', tn = 21, number = data['upload'])
  885. @app.route('/image/<path:name>')
  886. def image(name = None):
  887. filename = secure_filename(name)
  888. return send_file(os.path.join('image', filename), mimetype='image')
  889. @app.route('/')
  890. @app.route('/w/')
  891. def redirect():
  892. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(data['frontpage']).replace('/','%2F') + '" />'
  893. @app.route('/recentchanges')
  894. def recentchanges():
  895. i = 0
  896. div = '<div>'
  897. curs.execute("select * from history order by date desc limit 50")
  898. rows = curs.fetchall()
  899. if(rows):
  900. admin = admincheck()
  901. while True:
  902. try:
  903. a = rows[i]
  904. except:
  905. div = div + '</div>'
  906. break
  907. if(rows[i]['send']):
  908. send = rows[i]['send']
  909. send = re.sub('<a href="\/w\/(?P<in>[^"]*)">(?P<out>[^&]*)<\/a>', '<a href="/w/\g<in>">\g<out></a>', send)
  910. else:
  911. send = '<br>'
  912. title = rows[i]['title']
  913. title = re.sub('<', '&lt;', title)
  914. title = re.sub('>', '&gt;', title)
  915. m = re.search("\+", rows[i]['leng'])
  916. n = re.search("\-", rows[i]['leng'])
  917. if(m):
  918. leng = '<span style="color:green;">' + rows[i]['leng'] + '</span>'
  919. elif(n):
  920. leng = '<span style="color:red;">' + rows[i]['leng'] + '</span>'
  921. else:
  922. leng = '<span style="color:gray;">' + rows[i]['leng'] + '</span>'
  923. if(admin == 1):
  924. curs.execute("select * from user where id = '" + pymysql.escape_string(rows[i]['ip']) + "'")
  925. row = curs.fetchall()
  926. if(row):
  927. if(row[0]['acl'] == 'owner' or row[0]['acl'] == 'admin'):
  928. ban = ''
  929. else:
  930. curs.execute("select * from ban where block = '" + pymysql.escape_string(rows[i]['ip']) + "'")
  931. row = curs.fetchall()
  932. if(row):
  933. ban = ' <a href="/ban/' + parse.quote(rows[i]['ip']).replace('/','%2F') + '">(해제)</a>'
  934. else:
  935. ban = ' <a href="/ban/' + parse.quote(rows[i]['ip']).replace('/','%2F') + '">(차단)</a>'
  936. else:
  937. curs.execute("select * from ban where block = '" + pymysql.escape_string(rows[i]['ip']) + "'")
  938. row = curs.fetchall()
  939. if(row):
  940. ban = ' <a href="/ban/' + parse.quote(rows[i]['ip']).replace('/','%2F') + '">(해제)</a>'
  941. else:
  942. ban = ' <a href="/ban/' + parse.quote(rows[i]['ip']).replace('/','%2F') + '">(차단)</a>'
  943. else:
  944. ban = ''
  945. if(re.search('\.', rows[i]['ip'])):
  946. ip = rows[i]['ip']
  947. else:
  948. curs.execute("select * from data where title = '사용자:" + pymysql.escape_string(rows[i]['ip']) + "'")
  949. row = curs.fetchall()
  950. if(row):
  951. ip = '<a href="/w/' + parse.quote('사용자:' + rows[i]['ip']).replace('/','%2F') + '">' + rows[i]['ip'] + '</a>'
  952. else:
  953. ip = '<a class="not_thing" href="/w/' + parse.quote('사용자:' + rows[i]['ip']).replace('/','%2F') + '">' + rows[i]['ip'] + '</a>'
  954. if((int(rows[i]['id']) - 1) == 0):
  955. revert = ''
  956. else:
  957. revert = '<a href="/revert/' + parse.quote(rows[i]['title']).replace('/','%2F') + '/r/' + str(int(rows[i]['id']) - 1) + '">(되돌리기)</a>'
  958. div = div + '<table style="width: 100%;"><tbody><tr><td style="text-align: center;width:33.33%;"><a href="/w/' + parse.quote(rows[i]['title']).replace('/','%2F') + '">' + title + '</a> <a href="/history/' + parse.quote(rows[i]['title']).replace('/','%2F') + '/n/1">(역사)</a> ' + revert + ' (' + leng + ')</td><td style="text-align: center;width:33.33%;">' + ip + ban + '</td><td style="text-align: center;width:33.33%;">' + rows[i]['date'] + '</td></tr><tr><td colspan="3" style="text-align: center;width:100%;">' + send + '</td></tr></tbody></table>'
  959. i = i + 1
  960. return render_template('index.html', logo = data['name'], rows = div, tn = 3, title = '최근 변경내역')
  961. else:
  962. return render_template('index.html', logo = data['name'], rows = '', tn = 3, title = '최근 변경내역')
  963. @app.route('/record/<path:name>/n/<int:number>')
  964. def record(name = None, number = None):
  965. v = number * 50
  966. i = v - 50
  967. div = '<div>'
  968. curs.execute("select * from history where ip = '" + name + "' order by date desc")
  969. rows = curs.fetchall()
  970. if(rows):
  971. admin = admincheck()
  972. while True:
  973. try:
  974. a = rows[i]
  975. except:
  976. div = div + '</div>'
  977. if(number == 1):
  978. div = div + '<br><a href="/record/' + parse.quote(name).replace('/','%2F') + '/n/' + str(number + 1) + '">(다음)'
  979. else:
  980. div = div + '<br><a href="/record/' + parse.quote(name).replace('/','%2F') + '/n/' + str(number - 1) + '">(이전)'
  981. break
  982. if(rows[i]['send']):
  983. send = rows[i]['send']
  984. send = re.sub('<a href="\/w\/(?P<in>[^"]*)">(?P<out>[^&]*)<\/a>', '<a href="/w/\g<in>">\g<out></a>', send)
  985. else:
  986. send = '<br>'
  987. title = rows[i]['title']
  988. title = re.sub('<', '&lt;', title)
  989. title = re.sub('>', '&gt;', title)
  990. m = re.search("\+", rows[i]['leng'])
  991. n = re.search("\-", rows[i]['leng'])
  992. if(m):
  993. leng = '<span style="color:green;">' + rows[i]['leng'] + '</span>'
  994. elif(n):
  995. leng = '<span style="color:red;">' + rows[i]['leng'] + '</span>'
  996. else:
  997. leng = '<span style="color:gray;">' + rows[i]['leng'] + '</span>'
  998. if(admin == 1):
  999. curs.execute("select * from user where id = '" + pymysql.escape_string(rows[i]['ip']) + "'")
  1000. row = curs.fetchall()
  1001. if(row):
  1002. if(row[0]['acl'] == 'owner' or row[0]['acl'] == 'admin'):
  1003. ip = rows[i]['ip']
  1004. else:
  1005. curs.execute("select * from ban where block = '" + pymysql.escape_string(rows[i]['ip']) + "'")
  1006. row = curs.fetchall()
  1007. if(row):
  1008. ip = rows[i]['ip'] + ' <a href="/ban/' + parse.quote(rows[i]['ip']).replace('/','%2F') + '">(해제)</a>'
  1009. else:
  1010. ip = rows[i]['ip'] + ' <a href="/ban/' + parse.quote(rows[i]['ip']).replace('/','%2F') + '">(차단)</a>'
  1011. else:
  1012. curs.execute("select * from ban where block = '" + pymysql.escape_string(rows[i]['ip']) + "'")
  1013. row = curs.fetchall()
  1014. if(row):
  1015. ip = rows[i]['ip'] + ' <a href="/ban/' + parse.quote(rows[i]['ip']).replace('/','%2F') + '">(해제)</a>'
  1016. else:
  1017. ip = rows[i]['ip'] + ' <a href="/ban/' + parse.quote(rows[i]['ip']).replace('/','%2F') + '">(차단)</a>'
  1018. else:
  1019. ip = rows[i]['ip']
  1020. if((int(rows[i]['id']) - 1) == 0):
  1021. revert = ''
  1022. else:
  1023. revert = '<a href="/revert/' + parse.quote(rows[i]['title']).replace('/','%2F') + '/r/' + str(int(rows[i]['id']) - 1) + '">(되돌리기)</a>'
  1024. div = div + '<table style="width: 100%;"><tbody><tr><td style="text-align: center;width:33.33%;"><a href="/w/' + parse.quote(rows[i]['title']).replace('/','%2F') + '">' + title + '</a> r' + rows[i]['id'] + ' <a href="/history/' + parse.quote(rows[i]['title']).replace('/','%2F') + '/n/1">(역사)</a> ' + revert + ' (' + leng + ')</td><td style="text-align: center;width:33.33%;">' + ip + '</td><td style="text-align: center;width:33.33%;">' + rows[i]['date'] + '</td></tr><tr><td colspan="3" style="text-align: center;width:100%;">' + send + '</td></tr></tbody></table>'
  1025. if(i == v):
  1026. div = div + '</div>'
  1027. if(number == 1):
  1028. div = div + '<br><a href="/record/' + parse.quote(name).replace('/','%2F') + '/n/' + str(number + 1) + '">(다음)'
  1029. else:
  1030. div = div + '<br><a href="/record/' + parse.quote(name).replace('/','%2F') + '/n/' + str(number - 1) + '">(이전) <a href="/record/' + parse.quote(name).replace('/','%2F') + '/n/' + str(number + 1) + '">(다음)'
  1031. break
  1032. else:
  1033. i = i + 1
  1034. return render_template('index.html', logo = data['name'], rows = div, tn = 3, title = '유저 기록')
  1035. else:
  1036. return render_template('index.html', logo = data['name'], rows = '', tn = 3, title = '유저 기록')
  1037. @app.route('/recentdiscuss')
  1038. def recentdiscuss():
  1039. i = 0
  1040. div = '<div>'
  1041. curs.execute("select * from rd order by date desc limit 50")
  1042. rows = curs.fetchall()
  1043. if(rows):
  1044. while True:
  1045. try:
  1046. a = rows[i]
  1047. except:
  1048. div = div + '</div>'
  1049. break
  1050. title = rows[i]['title']
  1051. title = re.sub('<', '&lt;', title)
  1052. title = re.sub('>', '&gt;', title)
  1053. sub = rows[i]['sub']
  1054. sub = re.sub('<', '&lt;', sub)
  1055. sub = re.sub('>', '&gt;', sub)
  1056. div = div + '<table style="width: 100%;"><tbody><tr><td style="text-align: center;width:50%;"><a href="/topic/' + parse.quote(rows[i]['title']).replace('/','%2F') + '/sub/' + parse.quote(rows[i]['sub']).replace('/','%2F') + '">' + title + '</a> (' + sub + ')</td><td style="text-align: center;width:50%;">' + rows[i]['date'] + '</td></tr></tbody></table>'
  1057. i = i + 1
  1058. return render_template('index.html', logo = data['name'], rows = div, tn = 12, title = '최근 토론내역')
  1059. else:
  1060. return render_template('index.html', logo = data['name'], rows = '', tn = 12, title = '최근 토론내역')
  1061. @app.route('/recentblock')
  1062. def recentblock():
  1063. i = 0
  1064. div = '<div>'
  1065. curs.execute("select * from rb order by today desc limit 50")
  1066. rows = curs.fetchall()
  1067. if(rows):
  1068. while True:
  1069. try:
  1070. a = rows[i]
  1071. except:
  1072. div = div + '</div>'
  1073. break
  1074. why = rows[i]['why']
  1075. why = re.sub('<', '&lt;', why)
  1076. why = re.sub('>', '&gt;', why)
  1077. div = div + '<table style="width: 100%;"><tbody><tr><td style="text-align: center;width:20%;">' + rows[i]['block'] + '</a></td><td style="text-align: center;width:20%;">' + rows[i]['blocker'] + '</td><td style="text-align: center;width:20%;">' + rows[i]['end'] + '</td><td style="text-align: center;width:20%;">' + rows[i]['why'] + '</td><td style="text-align: center;width:20%;">' + rows[i]['today'] + '</td></tr></tbody></table>'
  1078. i = i + 1
  1079. return render_template('index.html', logo = data['name'], rows = div, tn = 20, title = '최근 차단내역')
  1080. else:
  1081. return render_template('index.html', logo = data['name'], rows = '', tn = 20, title = '최근 차단내역')
  1082. @app.route('/history/<path:name>/n/<int:number>', methods=['POST', 'GET'])
  1083. def gethistory(name = None, number = None):
  1084. if(request.method == 'POST'):
  1085. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(name).replace('/','%2F') + '/r/' + request.form["a"] + '/diff/' + request.form["b"] + '" />'
  1086. else:
  1087. select = ''
  1088. v = number * 50
  1089. i = v - 50
  1090. div = '<div>'
  1091. curs.execute("select * from history where title = '" + pymysql.escape_string(name) + "' order by id+0 desc")
  1092. rows = curs.fetchall()
  1093. if(rows):
  1094. admin = admincheck()
  1095. while True:
  1096. try:
  1097. a = rows[i]
  1098. except:
  1099. div = div + '</div>'
  1100. if(number != 1):
  1101. div = div + '<br><a href="/history/' + parse.quote(name).replace('/','%2F') + '/n/' + str(number - 1) + '">(이전)'
  1102. break
  1103. select = '<option value="' + str(i + 1) + '">' + str(i + 1) + '</option>' + select
  1104. if(rows[i]['send']):
  1105. send = rows[i]['send']
  1106. send = re.sub('<a href="\/w\/(?P<in>[^"]*)">(?P<out>[^&]*)<\/a>', '<a href="/w/\g<in>">\g<out></a>', send)
  1107. else:
  1108. send = '<br>'
  1109. m = re.search("\+", rows[i]['leng'])
  1110. n = re.search("\-", rows[i]['leng'])
  1111. if(m):
  1112. leng = '<span style="color:green;">' + rows[i]['leng'] + '</span>'
  1113. elif(n):
  1114. leng = '<span style="color:red;">' + rows[i]['leng'] + '</span>'
  1115. else:
  1116. leng = '<span style="color:gray;">' + rows[i]['leng'] + '</span>'
  1117. if(admin == 1):
  1118. curs.execute("select * from user where id = '" + pymysql.escape_string(rows[i]['ip']) + "'")
  1119. row = curs.fetchall()
  1120. if(row):
  1121. if(row[0]['acl'] == 'owner' or row[0]['acl'] == 'admin'):
  1122. ban = ''
  1123. else:
  1124. curs.execute("select * from ban where block = '" + pymysql.escape_string(rows[i]['ip']) + "'")
  1125. row = curs.fetchall()
  1126. if(row):
  1127. ban = ' <a href="/ban/' + parse.quote(rows[i]['ip']).replace('/','%2F') + '">(해제)</a>'
  1128. else:
  1129. ban = ' <a href="/ban/' + parse.quote(rows[i]['ip']).replace('/','%2F') + '">(차단)</a>'
  1130. else:
  1131. curs.execute("select * from ban where block = '" + pymysql.escape_string(rows[i]['ip']) + "'")
  1132. row = curs.fetchall()
  1133. if(row):
  1134. ban = ' <a href="/ban/' + parse.quote(rows[i]['ip']).replace('/','%2F') + '">(해제)</a>'
  1135. else:
  1136. ban = ' <a href="/ban/' + parse.quote(rows[i]['ip']).replace('/','%2F') + '">(차단)</a>'
  1137. else:
  1138. ban = ''
  1139. if(re.search("\.", rows[i]["ip"])):
  1140. ip = rows[i]["ip"]
  1141. else:
  1142. curs.execute("select * from data where title = '사용자:" + pymysql.escape_string(rows[i]['ip']) + "'")
  1143. row = curs.fetchall()
  1144. if(row):
  1145. ip = '<a href="/w/' + parse.quote('사용자:' + rows[i]['ip']).replace('/','%2F') + '">' + rows[i]['ip'] + '</a>'
  1146. else:
  1147. ip = '<a class="not_thing" href="/w/' + parse.quote('사용자:' + rows[i]['ip']).replace('/','%2F') + '">' + rows[i]['ip'] + '</a>'
  1148. div = div + '<table style="width: 100%;"><tbody><tr><td style="text-align: center;width:33.33%;">r' + rows[i]['id'] + '</a> <a href="/w/' + parse.quote(rows[i]['title']).replace('/','%2F') + '/r/' + rows[i]['id'] + '">(w)</a> <a href="/w/' + parse.quote(rows[i]['title']).replace('/','%2F') + '/raw/' + rows[i]['id'] + '">(Raw)</a> <a href="/revert/' + parse.quote(rows[i]['title']).replace('/','%2F') + '/r/' + rows[i]['id'] + '">(되돌리기)</a> (' + leng + ')</td><td style="text-align: center;width:33.33%;">' + ip + ban + '</td><td style="text-align: center;width:33.33%;">' + rows[i]['date'] + '</td></tr><tr><td colspan="3" style="text-align: center;width:100%;">' + send + '</td></tr></tbody></table>'
  1149. if(i == v):
  1150. div = div + '</div>'
  1151. if(number == 1):
  1152. div = div + '<br><a href="/history/' + parse.quote(name).replace('/','%2F') + '/n/' + str(number + 1) + '">(다음)'
  1153. else:
  1154. div = div + '<br><a href="/history/' + parse.quote(name).replace('/','%2F') + '/n/' + str(number - 1) + '">(이전) <a href="/history/' + parse.quote(name).replace('/','%2F') + '/n/' + str(number + 1) + '">(다음)'
  1155. break
  1156. else:
  1157. i = i + 1
  1158. return render_template('index.html', logo = data['name'], rows = div, tn = 5, title = name, page = parse.quote(name).replace('/','%2F'), select = select)
  1159. else:
  1160. return render_template('index.html', logo = data['name'], rows = '', tn = 5, title = name, page = parse.quote(name).replace('/','%2F'), select = select)
  1161. @app.route('/search', methods=['POST', 'GET'])
  1162. def search():
  1163. if(request.method == 'POST'):
  1164. curs.execute("select * from data where title = '" + pymysql.escape_string(request.form["search"]) + "'")
  1165. rows = curs.fetchall()
  1166. if(rows):
  1167. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(request.form["search"]).replace('/','%2F') + '" />'
  1168. else:
  1169. curs.execute("select * from data where title like '%" + pymysql.escape_string(request.form["search"]) + "%'")
  1170. rows = curs.fetchall()
  1171. div = ''
  1172. if(rows):
  1173. i = 0
  1174. div = div + '<li>문서가 없습니다. <a href="/w/' + parse.quote(request.form["search"]).replace('/','%2F') + '">바로가기</a></li><br>'
  1175. while True:
  1176. try:
  1177. div = div + '<li><a href="/w/' + parse.quote(rows[i]['title']).replace('/','%2F') + '">' + rows[i]['title'] + '</a></li>'
  1178. except:
  1179. break
  1180. i = i + 1
  1181. else:
  1182. return div + '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(request.form["search"]).replace('/','%2F') + '" />'
  1183. return render_template('index.html', logo = data['name'], data = div, title = '검색')
  1184. else:
  1185. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(data['frontpage']).replace('/','%2F') + '" />'
  1186. @app.route('/w/<path:name>')
  1187. def w(name = None):
  1188. acl = ''
  1189. m = re.search("^(.*)\/(.*)$", name)
  1190. if(m):
  1191. g = m.groups()
  1192. uppage = g[0]
  1193. style = ""
  1194. else:
  1195. uppage = ""
  1196. style = "display:none;"
  1197. m = re.search("^사용자:(.*)", name)
  1198. if(m):
  1199. g = m.groups()
  1200. curs.execute("select * from user where id = '" + pymysql.escape_string(g[0]) + "'")
  1201. rows = curs.fetchall()
  1202. if(rows):
  1203. if(rows[0]['acl'] == 'owner'):
  1204. acl = '(소유자)'
  1205. elif(rows[0]['acl'] == 'admin'):
  1206. acl = '(관리자)'
  1207. curs.execute("select * from data where title = '" + pymysql.escape_string(name) + "'")
  1208. rows = curs.fetchall()
  1209. if(rows):
  1210. if(rows[0]['acl'] == 'admin'):
  1211. acl = '(관리자)'
  1212. elif(rows[0]['acl'] == 'user'):
  1213. acl = '(유저)'
  1214. else:
  1215. if(not acl):
  1216. acl = ''
  1217. enddata = namumark(name, rows[0]['data'])
  1218. m = re.search('<div id="toc">((?:(?!\/div>).)*)<\/div>', enddata)
  1219. if(m):
  1220. result = m.groups()
  1221. left = result[0]
  1222. else:
  1223. left = ''
  1224. return render_template('index.html', title = name, logo = data['name'], page = parse.quote(name).replace('/','%2F'), data = enddata, license = data['license'], tn = 1, acl = acl, left = left, uppage = uppage, style = style)
  1225. else:
  1226. return render_template('index.html', title = name, logo = data['name'], page = parse.quote(name).replace('/','%2F'), data = '문서 없음', license = data['license'], tn = 1, uppage = uppage, style = style, acl = acl)
  1227. @app.route('/w/<path:name>/redirect/<redirect>')
  1228. def redirectw(name = None, redirect = None):
  1229. m = re.search("^(.*)\/(.*)$", name)
  1230. if(m):
  1231. g = m.groups()
  1232. uppage = g[0]
  1233. style = ""
  1234. else:
  1235. uppage = ""
  1236. style = "display:none;"
  1237. curs.execute("select * from data where title = '" + pymysql.escape_string(name) + "'")
  1238. rows = curs.fetchall()
  1239. if(rows):
  1240. if(rows[0]['acl'] == 'admin'):
  1241. acl = '(관리자)'
  1242. elif(rows[0]['acl'] == 'user'):
  1243. acl = '(유저)'
  1244. else:
  1245. acl = ''
  1246. newdata = rows[0]['data']
  1247. newdata = re.sub('^#(?:redirect|넘겨주기)\s(?P<in>[^\n]*)', ' * \g<in> 문서로 넘겨주기', newdata)
  1248. enddata = namumark(name, newdata)
  1249. m = re.search('<div id="toc">((?:(?!\/div>).)*)<\/div>', enddata)
  1250. if(m):
  1251. result = m.groups()
  1252. left = result[0]
  1253. else:
  1254. left = ''
  1255. test = redirect
  1256. redirect = re.sub('<', '&lt;', redirect)
  1257. redirect = re.sub('>', '&gt;', redirect)
  1258. redirect = re.sub('"', '&quot;', redirect)
  1259. return render_template('index.html', title = name, logo = data['name'], page = parse.quote(name).replace('/','%2F'), data = enddata, license = data['license'], tn = 1, redirect = '<a href="/w/' + parse.quote(test).replace('/','%2F') + '/redirect/' + parse.quote(name).replace('/','%2F') + '">' + redirect + '</a>에서 넘어 왔습니다.', left = left, acl = acl, uppage = uppage, style = style)
  1260. else:
  1261. test = redirect
  1262. redirect = re.sub('<', '&lt;', redirect)
  1263. redirect = re.sub('>', '&gt;', redirect)
  1264. redirect = re.sub('"', '&quot;', redirect)
  1265. return render_template('index.html', title = name, logo = data['name'], page = parse.quote(name).replace('/','%2F'), data = '문서 없음', license = data['license'], tn = 1, redirect = '<a href="/edit/' + parse.quote(test).replace('/','%2F') + '/redirect/' + parse.quote(name).replace('/','%2F') + '">' + redirect + '</a>에서 넘어 왔습니다.', uppage = uppage, style = style)
  1266. @app.route('/w/<path:name>/r/<number>')
  1267. def rew(name = None, number = None):
  1268. curs.execute("select * from history where title = '" + pymysql.escape_string(name) + "' and id = '" + number + "'")
  1269. rows = curs.fetchall()
  1270. if(rows):
  1271. enddata = namumark(name, rows[0]['data'])
  1272. m = re.search('<div id="toc">((?:(?!\/div>).)*)<\/div>', enddata)
  1273. if(m):
  1274. result = m.groups()
  1275. left = result[0]
  1276. else:
  1277. left = ''
  1278. return render_template('index.html', title = name, logo = data['name'], page = parse.quote(name).replace('/','%2F'), data = enddata, license = data['license'], tn = 6, left = left)
  1279. else:
  1280. return render_template('index.html', title = name, logo = data['name'], page = parse.quote(name).replace('/','%2F'), data = '문서 없음', license = data['license'], tn = 6)
  1281. @app.route('/w/<path:name>/raw/<number>')
  1282. def reraw(name = None, number = None):
  1283. curs.execute("select * from history where title = '" + pymysql.escape_string(name) + "' and id = '" + number + "'")
  1284. rows = curs.fetchall()
  1285. if(rows):
  1286. enddata = re.sub('<', '&lt;', rows[0]['data'])
  1287. enddata = re.sub('>', '&gt;', enddata)
  1288. enddata = re.sub('"', '&quot;', enddata)
  1289. enddata = re.sub("\n", '<br>', enddata)
  1290. return render_template('index.html', title = name, logo = data['name'], page = parse.quote(name).replace('/','%2F'), data = enddata, license = data['license'])
  1291. else:
  1292. return render_template('index.html', title = name, logo = data['name'], page = parse.quote(name).replace('/','%2F'), data = '문서 없음', license = data['license'])
  1293. @app.route('/raw/<path:name>')
  1294. def raw(name = None):
  1295. curs.execute("select * from data where title = '" + pymysql.escape_string(name) + "'")
  1296. rows = curs.fetchall()
  1297. if(rows):
  1298. enddata = re.sub('<', '&lt;', rows[0]['data'])
  1299. enddata = re.sub('>', '&gt;', enddata)
  1300. enddata = re.sub('"', '&quot;', enddata)
  1301. enddata = re.sub("\n", '<br>', enddata)
  1302. return render_template('index.html', title = name, logo = data['name'], page = parse.quote(name).replace('/','%2F'), data = enddata, license = data['license'], tn = 7)
  1303. else:
  1304. return render_template('index.html', title = name, logo = data['name'], page = parse.quote(name).replace('/','%2F'), data = '문서 없음', license = data['license'], tn = 7)
  1305. @app.route('/revert/<path:name>/r/<number>', methods=['POST', 'GET'])
  1306. def revert(name = None, number = None):
  1307. if(request.method == 'POST'):
  1308. curs.execute("select * from history where title = '" + pymysql.escape_string(name) + "' and id = '" + number + "'")
  1309. rows = curs.fetchall()
  1310. if(rows):
  1311. ip = getip(request)
  1312. can = getcan(ip, name)
  1313. if(can == 1):
  1314. return '<meta http-equiv="refresh" content="0;url=/ban" />'
  1315. else:
  1316. today = getnow()
  1317. curs.execute("select * from data where title = '" + pymysql.escape_string(name) + "'")
  1318. row = curs.fetchall()
  1319. if(row):
  1320. leng = getleng(len(row[0]['data']), len(rows[0]['data']))
  1321. curs.execute("update data set data = '" + pymysql.escape_string(rows[0]['data']) + "' where title = '" + pymysql.escape_string(name) + "'")
  1322. conn.commit()
  1323. else:
  1324. leng = '+' + str(len(rows[0]['data']))
  1325. curs.execute("insert into data (title, data, acl) value ('" + pymysql.escape_string(name) + "', '" + pymysql.escape_string(rows[0]['data']) + "', '')")
  1326. conn.commit()
  1327. history(name, rows[0]['data'], today, ip, '문서를 ' + number + '판으로 되돌렸습니다.', leng)
  1328. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(name).replace('/','%2F') + '" />'
  1329. else:
  1330. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(name).replace('/','%2F') + '" />'
  1331. else:
  1332. ip = getip(request)
  1333. can = getcan(ip, name)
  1334. if(can == 1):
  1335. return '<meta http-equiv="refresh" content="0;url=/ban" />'
  1336. else:
  1337. curs.execute("select * from history where title = '" + pymysql.escape_string(name) + "' and id = '" + number + "'")
  1338. rows = curs.fetchall()
  1339. if(rows):
  1340. return render_template('index.html', title = name, logo = data['name'], page = parse.quote(name).replace('/','%2F'), r = parse.quote(number).replace('/','%2F'), tn = 13, plus = '정말 되돌리시겠습니까?')
  1341. else:
  1342. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(name).replace('/','%2F') + '" />'
  1343. @app.route('/edit/<path:name>', methods=['POST', 'GET'])
  1344. def edit(name = None):
  1345. if(request.method == 'POST'):
  1346. curs.execute("select * from data where title = '" + pymysql.escape_string(name) + "'")
  1347. rows = curs.fetchall()
  1348. m = re.search('(?:[^A-Za-zㄱ-힣0-9 ])', request.form["send"])
  1349. if(m):
  1350. return render_template('index.html', title = '편집 오류', logo = data['name'], data = '편집 내용 기록에는 한글과 영어와 숫자, 공백만 허용 됩니다.')
  1351. else:
  1352. if(rows):
  1353. ip = getip(request)
  1354. can = getcan(ip, name)
  1355. if(can == 1):
  1356. return '<meta http-equiv="refresh" content="0;url=/ban" />'
  1357. else:
  1358. today = getnow()
  1359. leng = getleng(len(rows[0]['data']), len(request.form["content"]))
  1360. history(name, request.form["content"], today, ip, request.form["send"], leng)
  1361. curs.execute("update data set data = '" + pymysql.escape_string(request.form["content"]) + "' where title = '" + pymysql.escape_string(name) + "'")
  1362. conn.commit()
  1363. else:
  1364. ip = getip(request)
  1365. can = getcan(ip, name)
  1366. if(can == 1):
  1367. return '<meta http-equiv="refresh" content="0;url=/ban" />'
  1368. else:
  1369. today = getnow()
  1370. leng = '+' + str(len(request.form["content"]))
  1371. history(name, request.form["content"], today, ip, request.form["send"], leng)
  1372. curs.execute("insert into data (title, data, acl) value ('" + pymysql.escape_string(name) + "', '" + pymysql.escape_string(request.form["content"]) + "', '')")
  1373. conn.commit()
  1374. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(name).replace('/','%2F') + '" />'
  1375. else:
  1376. ip = getip(request)
  1377. can = getcan(ip, name)
  1378. if(can == 1):
  1379. return '<meta http-equiv="refresh" content="0;url=/ban" />'
  1380. else:
  1381. if(re.search('\.', ip)):
  1382. notice = '비 로그인 상태 입니다. 비 로그인으로 편집시 아이피가 역사에 기록 됩니다. 편집 시 동의 함으로 간주 됩니다.'
  1383. else:
  1384. notice = ''
  1385. curs.execute("select * from data where title = '" + pymysql.escape_string(name) + "'")
  1386. rows = curs.fetchall()
  1387. if(rows):
  1388. return render_template('index.html', title = name, logo = data['name'], page = parse.quote(name).replace('/','%2F'), data = rows[0]['data'], tn = 2, notice = notice)
  1389. else:
  1390. return render_template('index.html', title = name, logo = data['name'], page = parse.quote(name).replace('/','%2F'), data = '', tn = 2, notice = notice)
  1391. @app.route('/preview/<path:name>', methods=['POST'])
  1392. def preview(name = None):
  1393. ip = getip(request)
  1394. can = getcan(ip, name)
  1395. if(can == 1):
  1396. return '<meta http-equiv="refresh" content="0;url=/ban" />'
  1397. else:
  1398. if(re.search('\.', ip)):
  1399. notice = '비 로그인 상태 입니다. 비 로그인으로 편집시 아이피가 역사에 기록 됩니다. 편집 시 동의 함으로 간주 됩니다.'
  1400. else:
  1401. notice = ''
  1402. newdata = request.form["content"]
  1403. newdata = re.sub('^#(?:redirect|넘겨주기)\s(?P<in>[^\n]*)', ' * \g<in> 문서로 넘겨주기', newdata)
  1404. enddata = namumark(name, newdata)
  1405. m = re.search('<div id="toc">((?:(?!\/div>).)*)<\/div>', enddata)
  1406. if(m):
  1407. result = m.groups()
  1408. left = result[0]
  1409. else:
  1410. left = ''
  1411. return render_template('index.html', title = name, logo = data['name'], page = parse.quote(name).replace('/','%2F'), data = request.form["content"], tn = 2, preview = 1, enddata = enddata, left = left, notice = notice)
  1412. @app.route('/delete/<path:name>', methods=['POST', 'GET'])
  1413. def delete(name = None):
  1414. if(request.method == 'POST'):
  1415. curs.execute("select * from data where title = '" + pymysql.escape_string(name) + "'")
  1416. rows = curs.fetchall()
  1417. if(rows):
  1418. ip = getip(request)
  1419. can = getcan(ip, name)
  1420. if(can == 1):
  1421. return '<meta http-equiv="refresh" content="0;url=/ban" />'
  1422. else:
  1423. today = getnow()
  1424. leng = '-' + str(len(rows[0]['data']))
  1425. history(name, '', today, ip, '문서를 삭제 했습니다.', leng)
  1426. curs.execute("delete from data where title = '" + pymysql.escape_string(name) + "'")
  1427. conn.commit()
  1428. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(name).replace('/','%2F') + '" />'
  1429. else:
  1430. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(name).replace('/','%2F') + '" />'
  1431. else:
  1432. curs.execute("select * from data where title = '" + pymysql.escape_string(name) + "'")
  1433. rows = curs.fetchall()
  1434. if(rows):
  1435. ip = getip(request)
  1436. can = getcan(ip, name)
  1437. if(can == 1):
  1438. return '<meta http-equiv="refresh" content="0;url=/ban" />'
  1439. else:
  1440. return render_template('index.html', title = name, logo = data['name'], page = parse.quote(name).replace('/','%2F'), tn = 8, plus = '정말 삭제 하시겠습니까?')
  1441. else:
  1442. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(name).replace('/','%2F') + '" />'
  1443. @app.route('/move/<path:name>', methods=['POST', 'GET'])
  1444. def move(name = None):
  1445. if(request.method == 'POST'):
  1446. curs.execute("select * from data where title = '" + pymysql.escape_string(name) + "'")
  1447. rows = curs.fetchall()
  1448. if(rows):
  1449. ip = getip(request)
  1450. can = getcan(ip, name)
  1451. if(can == 1):
  1452. return '<meta http-equiv="refresh" content="0;url=/ban" />'
  1453. else:
  1454. today = getnow()
  1455. leng = '0'
  1456. curs.execute("select * from history where title = '" + pymysql.escape_string(request.form["title"]) + "'")
  1457. row = curs.fetchall()
  1458. if(row):
  1459. return render_template('index.html', title = '이동 오류', logo = data['name'], data = '이동 하려는 곳에 문서가 이미 있습니다.')
  1460. else:
  1461. history(name, rows[0]['data'], today, ip, '<a href="/w/' + parse.quote(name).replace('/','%2F') + '">' + name + '</a> 문서를 <a href="/w/' + parse.quote(request.form["title"]).replace('/','%2F') + '">' + request.form["title"] + '</a> 문서로 이동 했습니다.', leng)
  1462. curs.execute("update data set title = '" + pymysql.escape_string(request.form["title"]) + "' where title = '" + pymysql.escape_string(name) + "'")
  1463. curs.execute("update history set title = '" + pymysql.escape_string(request.form["title"]) + "' where title = '" + pymysql.escape_string(name) + "'")
  1464. conn.commit()
  1465. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(request.form["title"]).replace('/','%2F') + '" />'
  1466. else:
  1467. ip = getip(request)
  1468. can = getcan(ip, name)
  1469. if(can == 1):
  1470. return '<meta http-equiv="refresh" content="0;url=/ban" />'
  1471. else:
  1472. today = getnow()
  1473. leng = '0'
  1474. curs.execute("select * from history where title = '" + pymysql.escape_string(request.form["title"]) + "'")
  1475. row = curs.fetchall()
  1476. if(row):
  1477. return render_template('index.html', title = '이동 오류', logo = data['name'], data = '이동 하려는 곳에 문서가 이미 있습니다.')
  1478. else:
  1479. history(name, '', today, ip, '<a href="/w/' + parse.quote(name).replace('/','%2F') + '">' + name + '</a> 문서를 <a href="/w/' + parse.quote(request.form["title"]).replace('/','%2F') + '">' + request.form["title"] + '</a> 문서로 이동 했습니다.', leng)
  1480. curs.execute("update history set title = '" + pymysql.escape_string(request.form["title"]) + "' where title = '" + pymysql.escape_string(name) + "'")
  1481. conn.commit()
  1482. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(request.form["title"]).replace('/','%2F') + '" />'
  1483. else:
  1484. ip = getip(request)
  1485. can = getcan(ip, name)
  1486. if(can == 1):
  1487. return '<meta http-equiv="refresh" content="0;url=/ban" />'
  1488. else:
  1489. return render_template('index.html', title = name, logo = data['name'], page = parse.quote(name).replace('/','%2F'), tn = 9, plus = '정말 이동 하시겠습니까?')
  1490. @app.route('/setup')
  1491. def setup():
  1492. curs.execute("create table if not exists data(title text not null, data longtext not null, acl text not null)")
  1493. curs.execute("create table if not exists history(id text not null, title text not null, data longtext not null, date text not null, ip text not null, send text not null, leng text not null)")
  1494. curs.execute("create table if not exists rd(title text not null, sub text not null, date text not null)")
  1495. curs.execute("create table if not exists user(id text not null, pw text not null, acl text not null)")
  1496. curs.execute("create table if not exists ban(block text not null, end text not null, why text not null, band text not null)")
  1497. curs.execute("create table if not exists topic(id text not null, title text not null, sub text not null, data longtext not null, date text not null, ip text not null, block text not null)")
  1498. curs.execute("create table if not exists stop(title text not null, sub text not null, close text not null)")
  1499. curs.execute("create table if not exists rb(block text not null, end text not null, today text not null, blocker text not null, why text not null)")
  1500. curs.execute("create table if not exists login(user text not null, ip text not null, today text not null)")
  1501. return render_template('index.html', title = '설치 완료', logo = data['name'], data = '문제 없었음')
  1502. @app.route('/other')
  1503. def other():
  1504. return render_template('index.html', title = '기타 메뉴', logo = data['name'], data = '<li><a href="/titleindex">모든 문서</a><li><a href="/grammar">문법 설명</a></li><li><a href="/version">버전</a></li><li><a href="/recentblock">최근 차단내역</a></li><li><a href="/upload">업로드</a></li>')
  1505. @app.route('/titleindex')
  1506. def titleindex():
  1507. i = 0
  1508. div = '<div>'
  1509. curs.execute("select * from data")
  1510. rows = curs.fetchall()
  1511. if(rows):
  1512. while True:
  1513. try:
  1514. a = rows[i]
  1515. except:
  1516. div = div + '</div>'
  1517. break
  1518. div = div + '<li><a href="/w/' + parse.quote(rows[i]['title']).replace('/','%2F') + '">' + rows[i]['title'] + '</a></li>'
  1519. i = i + 1
  1520. return render_template('index.html', logo = data['name'], rows = div + '<br><span>이 위키에는 총 ' + str(i + 1) + '개의 문서가 있습니다.</span>', tn = 4, title = '모든 문서')
  1521. else:
  1522. return render_template('index.html', logo = data['name'], rows = '', tn = 4, title = '모든 문서')
  1523. @app.route('/topic/<path:name>', methods=['POST', 'GET'])
  1524. def topic(name = None):
  1525. if(request.method == 'POST'):
  1526. return '<meta http-equiv="refresh" content="0;url=/topic/' + parse.quote(name).replace('/','%2F') + '/sub/' + parse.quote(request.form["topic"]).replace('/','%2F') + '" />'
  1527. else:
  1528. div = '<div>'
  1529. i = 0
  1530. curs.execute("select * from topic where title = '" + pymysql.escape_string(name) + "' order by sub asc")
  1531. rows = curs.fetchall()
  1532. while True:
  1533. try:
  1534. a = rows[i]
  1535. except:
  1536. div = div + '</div>'
  1537. break
  1538. j = i + 1
  1539. indata = namumark(name, rows[i]['data'])
  1540. if(rows[i]['block'] == 'O'):
  1541. indata = '블라인드 되었습니다.'
  1542. block = 'style="background: gainsboro;"'
  1543. else:
  1544. block = ''
  1545. if(i == 0):
  1546. sub = rows[i]['sub']
  1547. curs.execute("select * from stop where title = '" + pymysql.escape_string(name) + "' and sub = '" + pymysql.escape_string(sub) + "' and close = 'O'")
  1548. row = curs.fetchall()
  1549. if(not row):
  1550. div = div + '<h2><a href="/topic/' + parse.quote(name).replace('/','%2F') + '/sub/' + parse.quote(rows[i]['sub']).replace('/','%2F') + '">' + str((i + 1)) + '. ' + rows[i]['sub'] + '</a></h2>'
  1551. div = div + '<table id="toron"><tbody><tr><td id="toroncolorgreen"><a href="javascript:void(0);" id="' + str(j) + '">#' + str(j) + '</a> ' + rows[i]['ip'] + ' <span style="float:right;">' + rows[i]['date'] + '</span></td></tr><tr><td ' + block + '>' + indata + '</td></tr></tbody></table><br>'
  1552. else:
  1553. if(not sub == rows[i]['sub']):
  1554. sub = rows[i]['sub']
  1555. curs.execute("select * from stop where title = '" + pymysql.escape_string(name) + "' and sub = '" + pymysql.escape_string(sub) + "' and close = 'O'")
  1556. row = curs.fetchall()
  1557. if(not row):
  1558. div = div + '<h2><a href="/topic/' + parse.quote(name).replace('/','%2F') + '/sub/' + parse.quote(rows[i]['sub']).replace('/','%2F') + '">' + str((i + 1)) + '. ' + rows[i]['sub'] + '</a></h2>'
  1559. div = div + '<table id="toron"><tbody><tr><td id="toroncolorgreen"><a href="javascript:void(0);" id="' + str(j) + '">#' + str(j) + '</a> ' + rows[i]['ip'] + ' <span style="float:right;">' + rows[i]['date'] + '</span></td></tr><tr><td ' + block + '>' + indata + '</td></tr></tbody></table><br>'
  1560. i = i + 1
  1561. return render_template('index.html', title = name, page = parse.quote(name).replace('/','%2F'), logo = data['name'], plus = div, tn = 10, list = 1)
  1562. @app.route('/topic/<path:name>/close')
  1563. def topicstoplist(name = None):
  1564. if(request.method == 'POST'):
  1565. return '<meta http-equiv="refresh" content="0;url=/topic/' + parse.quote(name).replace('/','%2F') + '/sub/' + parse.quote(request.form["topic"]).replace('/','%2F') + '" />'
  1566. else:
  1567. div = '<div>'
  1568. i = 0
  1569. curs.execute("select * from stop where title = '" + pymysql.escape_string(name) + "' and close = 'O' order by sub asc")
  1570. rows = curs.fetchall()
  1571. while True:
  1572. try:
  1573. a = rows[i]
  1574. except:
  1575. div = div + '</div>'
  1576. break
  1577. curs.execute("select * from topic where title = '" + pymysql.escape_string(name) + "' and sub = '" + pymysql.escape_string(rows[i]['sub']) + "' and id = '1'")
  1578. row = curs.fetchall()
  1579. if(row):
  1580. j = i + 1
  1581. indata = namumark(name, row[0]['data'])
  1582. if(row[0]['block'] == 'O'):
  1583. indata = '블라인드 되었습니다.'
  1584. block = 'style="background: gainsboro;"'
  1585. else:
  1586. block = ''
  1587. div = div + '<h2><a href="/topic/' + parse.quote(name).replace('/','%2F') + '/sub/' + parse.quote(rows[i]['sub']).replace('/','%2F') + '">' + str((i + 1)) + '. ' + rows[i]['sub'] + '</a></h2>'
  1588. div = div + '<table id="toron"><tbody><tr><td id="toroncolorgreen"><a href="javascript:void(0);" id="' + str(j) + '">#' + str(j) + '</a> ' + row[0]['ip'] + ' <span style="float:right;">' + row[0]['date'] + '</span></td></tr><tr><td ' + block + '>' + indata + '</td></tr></tbody></table><br>'
  1589. i = i + 1
  1590. return render_template('index.html', title = name, page = parse.quote(name).replace('/','%2F'), logo = data['name'], plus = div, tn = 10)
  1591. @app.route('/topic/<path:name>/sub/<path:sub>', methods=['POST', 'GET'])
  1592. def sub(name = None, sub = None):
  1593. if(request.method == 'POST'):
  1594. curs.execute("select * from topic where title = '" + pymysql.escape_string(name) + "' and sub = '" + pymysql.escape_string(sub) + "' order by id+0 desc limit 1")
  1595. rows = curs.fetchall()
  1596. if(rows):
  1597. number = int(rows[0]['id']) + 1
  1598. else:
  1599. number = 1
  1600. ip = getip(request)
  1601. ban = getdiscuss(ip, name, sub)
  1602. if(ban == 1):
  1603. return '<meta http-equiv="refresh" content="0;url=/ban" />'
  1604. else:
  1605. curs.execute("select * from user where id = '" + pymysql.escape_string(ip) + "'")
  1606. rows = curs.fetchall()
  1607. if(rows):
  1608. if(rows[0]['acl'] == 'owner' or rows[0]['acl'] == 'admin'):
  1609. ip = ip + ' - Admin'
  1610. today = getnow()
  1611. discuss(name, sub, today)
  1612. curs.execute("insert into topic (id, title, sub, data, date, ip, block) value ('" + str(number) + "', '" + pymysql.escape_string(name) + "', '" + pymysql.escape_string(sub) + "', '" + pymysql.escape_string(request.form["content"]) + "', '" + today + "', '" + ip + "', '')")
  1613. conn.commit()
  1614. return '<meta http-equiv="refresh" content="0;url=/topic/' + parse.quote(name).replace('/','%2F') + '/sub/' + parse.quote(sub).replace('/','%2F') + '" />'
  1615. else:
  1616. ip = getip(request)
  1617. ban = getdiscuss(ip, name, sub)
  1618. admin = admincheck()
  1619. if(admin == 1):
  1620. div = '<div>' + '<a href="/topic/' + parse.quote(name).replace('/','%2F') + '/sub/' + parse.quote(sub).replace('/','%2F') + '/close">(토론 닫기 및 열기)</a>' + ' <a href="/topic/' + parse.quote(name).replace('/','%2F') + '/sub/' + parse.quote(sub).replace('/','%2F') + '/stop">(토론 정지 및 재개)</a><br><br>'
  1621. else:
  1622. div = '<div>'
  1623. i = 0
  1624. curs.execute("select * from topic where title = '" + pymysql.escape_string(name) + "' and sub = '" + pymysql.escape_string(sub) + "' order by id+0 asc")
  1625. rows = curs.fetchall()
  1626. while True:
  1627. try:
  1628. a = rows[i]
  1629. except:
  1630. div = div + '</div>'
  1631. break
  1632. if(i == 0):
  1633. start = rows[i]['ip']
  1634. indata = namumark(name, rows[i]['data'])
  1635. if(rows[i]['block'] == 'O'):
  1636. indata = '블라인드 되었습니다.'
  1637. block = 'style="background: gainsboro;"'
  1638. else:
  1639. block = ''
  1640. m = re.search("([^-]*)\s\-\s(Close|Reopen|Stop|Restart)$", rows[i]['ip'])
  1641. if(m):
  1642. ban = ""
  1643. else:
  1644. if(admin == 1):
  1645. curs.execute("select * from ban where block = '" + pymysql.escape_string(rows[i]['ip']) + "'")
  1646. row = curs.fetchall()
  1647. if(rows[i]['block'] == 'O'):
  1648. isblock = ' <a href="/topic/' + parse.quote(name).replace('/','%2F') + '/sub/' + parse.quote(sub).replace('/','%2F') + '/b/' + str(i + 1) + '">(해제)</a>'
  1649. else:
  1650. isblock = ' <a href="/topic/' + parse.quote(name).replace('/','%2F') + '/sub/' + parse.quote(sub).replace('/','%2F') + '/b/' + str(i + 1) + '">(블라인드)</a>'
  1651. n = re.search("\- (?:Admin)$", rows[i]['ip'])
  1652. if(n):
  1653. ban = isblock
  1654. else:
  1655. if(row):
  1656. ban = ' <a href="/ban/' + parse.quote(rows[i]['ip']).replace('/','%2F') + '">(해제)</a>' + isblock
  1657. else:
  1658. ban = ' <a href="/ban/' + parse.quote(rows[i]['ip']).replace('/','%2F') + '">(차단)</a>' + isblock
  1659. else:
  1660. ban = ""
  1661. m = re.search("([^-]*)\s\-\s(Close|Reopen|Stop|Restart|Admin)$", rows[i]['ip'])
  1662. if(m):
  1663. g = m.groups()
  1664. curs.execute("select * from data where title = '사용자:" + pymysql.escape_string(g[0]) + "'")
  1665. row = curs.fetchall()
  1666. if(row):
  1667. ip = '<a href="/w/' + parse.quote('사용자:' + g[0]).replace('/','%2F') + '">' + g[0] + '</a> - ' + g[1]
  1668. else:
  1669. ip = '<a class="not_thing" href="/w/' + parse.quote('사용자:' + g[0]).replace('/','%2F') + '">' + g[0] + '</a> - ' + g[1]
  1670. elif(re.search("\.", rows[i]["ip"])):
  1671. ip = rows[i]["ip"]
  1672. else:
  1673. curs.execute("select * from data where title = '사용자:" + pymysql.escape_string(rows[i]['ip']) + "'")
  1674. row = curs.fetchall()
  1675. if(row):
  1676. ip = '<a href="/w/' + parse.quote('사용자:' + rows[i]['ip']).replace('/','%2F') + '">' + rows[i]['ip'] + '</a>'
  1677. else:
  1678. ip = '<a class="not_thing" href="/w/' + parse.quote('사용자:' + rows[i]['ip']).replace('/','%2F') + '">' + rows[i]['ip'] + '</a>'
  1679. if(rows[i]['ip'] == start):
  1680. j = i + 1
  1681. div = div + '<table id="toron"><tbody><tr><td id="toroncolorgreen"><a href="javascript:void(0);" id="' + str(j) + '">#' + str(j) + '</a> ' + ip + ban + ' <span style="float:right;">' + rows[i]['date'] + '</span></td></tr><tr><td ' + block + '>' + indata + '</td></tr></tbody></table><br>'
  1682. else:
  1683. j = i + 1
  1684. div = div + '<table id="toron"><tbody><tr><td id="toroncolor"><a href="javascript:void(0);" id="' + str(j) + '">#' + str(j) + '</a> ' + ip + ban + ' <span style="float:right;">' + rows[i]['date'] + '</span></td></tr><tr><td ' + block + '>' + indata + '</td></tr></tbody></table><br>'
  1685. i = i + 1
  1686. return render_template('index.html', title = name, page = parse.quote(name).replace('/','%2F'), suburl = parse.quote(sub).replace('/','%2F'), sub = sub, logo = data['name'], rows = div, tn = 11, ban = ban)
  1687. @app.route('/topic/<path:name>/sub/<path:sub>/b/<number>')
  1688. def blind(name = None, sub = None, number = None):
  1689. if(session.get('Now') == True):
  1690. ip = getip(request)
  1691. curs.execute("select * from user where id = '" + pymysql.escape_string(ip) + "'")
  1692. rows = curs.fetchall()
  1693. if(rows):
  1694. if(rows[0]['acl'] == 'owner' or rows[0]['acl'] == 'admin'):
  1695. curs.execute("select * from topic where title = '" + pymysql.escape_string(name) + "' and sub = '" + pymysql.escape_string(sub) + "' and id = '" + number + "'")
  1696. row = curs.fetchall()
  1697. if(row):
  1698. if(row[0]['block'] == 'O'):
  1699. curs.execute("update topic set block = '' where title = '" + pymysql.escape_string(name) + "' and sub = '" + pymysql.escape_string(sub) + "' and id = '" + number + "'")
  1700. else:
  1701. curs.execute("update topic set block = 'O' where title = '" + pymysql.escape_string(name) + "' and sub = '" + pymysql.escape_string(sub) + "' and id = '" + number + "'")
  1702. conn.commit()
  1703. return '<meta http-equiv="refresh" content="0;url=/topic/' + name + '/sub/' + sub + '" />'
  1704. else:
  1705. return '<meta http-equiv="refresh" content="0;url=/topic/' + name + '/sub/' + sub + '" />'
  1706. else:
  1707. return render_template('index.html', title = '권한 오류', logo = data['name'], data = '권한이 모자랍니다.')
  1708. else:
  1709. return render_template('index.html', title = '권한 오류', logo = data['name'], data = '계정이 없습니다.')
  1710. else:
  1711. return render_template('index.html', title = '권한 오류', logo = data['name'], data = '비 로그인 상태 입니다.')
  1712. @app.route('/topic/<path:name>/sub/<path:sub>/stop')
  1713. def topicstop(name = None, sub = None):
  1714. if(session.get('Now') == True):
  1715. ip = getip(request)
  1716. curs.execute("select * from user where id = '" + pymysql.escape_string(ip) + "'")
  1717. rows = curs.fetchall()
  1718. if(rows):
  1719. if(rows[0]['acl'] == 'owner' or rows[0]['acl'] == 'admin'):
  1720. curs.execute("select * from topic where title = '" + pymysql.escape_string(name) + "' and sub = '" + pymysql.escape_string(sub) + "' order by id+0 desc limit 1")
  1721. row = curs.fetchall()
  1722. if(row):
  1723. today = getnow()
  1724. curs.execute("select * from stop where title = '" + pymysql.escape_string(name) + "' and sub = '" + pymysql.escape_string(sub) + "' and close = ''")
  1725. rows = curs.fetchall()
  1726. if(rows):
  1727. curs.execute("insert into topic (id, title, sub, data, date, ip, block) value ('" + pymysql.escape_string(str(int(row[0]['id']) + 1)) + "', '" + pymysql.escape_string(name) + "', '" + pymysql.escape_string(sub) + "', 'Restart', '" + pymysql.escape_string(today) + "', '" + pymysql.escape_string(ip) + " - Restart', '')")
  1728. curs.execute("delete from stop where title = '" + pymysql.escape_string(name) + "' and sub = '" + pymysql.escape_string(sub) + "' and close = ''")
  1729. else:
  1730. curs.execute("insert into topic (id, title, sub, data, date, ip, block) value ('" + pymysql.escape_string(str(int(row[0]['id']) + 1)) + "', '" + pymysql.escape_string(name) + "', '" + pymysql.escape_string(sub) + "', 'Stop', '" + pymysql.escape_string(today) + "', '" + pymysql.escape_string(ip) + " - Stop', '')")
  1731. curs.execute("insert into stop (title, sub, close) value ('" + pymysql.escape_string(name) + "', '" + pymysql.escape_string(sub) + "', '')")
  1732. conn.commit()
  1733. return '<meta http-equiv="refresh" content="0;url=/topic/' + name + '/sub/' + sub + '" />'
  1734. else:
  1735. return '<meta http-equiv="refresh" content="0;url=/topic/' + name + '/sub/' + sub + '" />'
  1736. else:
  1737. return render_template('index.html', title = '권한 오류', logo = data['name'], data = '권한이 모자랍니다.')
  1738. else:
  1739. return render_template('index.html', title = '권한 오류', logo = data['name'], data = '계정이 없습니다.')
  1740. else:
  1741. return render_template('index.html', title = '권한 오류', logo = data['name'], data = '비 로그인 상태 입니다.')
  1742. @app.route('/topic/<path:name>/sub/<path:sub>/close')
  1743. def topicclose(name = None, sub = None):
  1744. if(session.get('Now') == True):
  1745. ip = getip(request)
  1746. curs.execute("select * from user where id = '" + pymysql.escape_string(ip) + "'")
  1747. rows = curs.fetchall()
  1748. if(rows):
  1749. if(rows[0]['acl'] == 'owner' or rows[0]['acl'] == 'admin'):
  1750. curs.execute("select * from topic where title = '" + pymysql.escape_string(name) + "' and sub = '" + pymysql.escape_string(sub) + "' order by id+0 desc limit 1")
  1751. row = curs.fetchall()
  1752. if(row):
  1753. today = getnow()
  1754. curs.execute("select * from stop where title = '" + pymysql.escape_string(name) + "' and sub = '" + pymysql.escape_string(sub) + "' and close = 'O'")
  1755. rows = curs.fetchall()
  1756. if(rows):
  1757. curs.execute("insert into topic (id, title, sub, data, date, ip, block) value ('" + pymysql.escape_string(str(int(row[0]['id']) + 1)) + "', '" + pymysql.escape_string(name) + "', '" + pymysql.escape_string(sub) + "', 'Reopen', '" + pymysql.escape_string(today) + "', '" + pymysql.escape_string(ip) + " - Reopen', '')")
  1758. curs.execute("delete from stop where title = '" + pymysql.escape_string(name) + "' and sub = '" + pymysql.escape_string(sub) + "' and close = 'O'")
  1759. else:
  1760. curs.execute("insert into topic (id, title, sub, data, date, ip, block) value ('" + pymysql.escape_string(str(int(row[0]['id']) + 1)) + "', '" + pymysql.escape_string(name) + "', '" + pymysql.escape_string(sub) + "', 'Close', '" + pymysql.escape_string(today) + "', '" + pymysql.escape_string(ip) + " - Close', '')")
  1761. curs.execute("insert into stop (title, sub, close) value ('" + pymysql.escape_string(name) + "', '" + pymysql.escape_string(sub) + "', 'O')")
  1762. conn.commit()
  1763. return '<meta http-equiv="refresh" content="0;url=/topic/' + name + '/sub/' + sub + '" />'
  1764. else:
  1765. return '<meta http-equiv="refresh" content="0;url=/topic/' + name + '/sub/' + sub + '" />'
  1766. else:
  1767. return render_template('index.html', title = '권한 오류', logo = data['name'], data = '권한이 모자랍니다.')
  1768. else:
  1769. return render_template('index.html', title = '권한 오류', logo = data['name'], data = '계정이 없습니다.')
  1770. else:
  1771. return render_template('index.html', title = '권한 오류', logo = data['name'], data = '비 로그인 상태 입니다.')
  1772. @app.route('/login', methods=['POST', 'GET'])
  1773. def login():
  1774. if(request.method == 'POST'):
  1775. ip = getip(request)
  1776. ban = getban(ip)
  1777. if(ban == 1):
  1778. return '<meta http-equiv="refresh" content="0;url=/ban" />'
  1779. else:
  1780. curs.execute("select * from user where id = '" + pymysql.escape_string(request.form["id"]) + "'")
  1781. rows = curs.fetchall()
  1782. if(rows):
  1783. if(session.get('Now') == True):
  1784. return render_template('index.html', title = '로그인 오류', logo = data['name'], data = '이미 로그인 되어 있습니다.')
  1785. elif(bcrypt.checkpw(bytes(request.form["pw"], 'utf-8'), bytes(rows[0]['pw'], 'utf-8'))):
  1786. session['Now'] = True
  1787. session['DREAMER'] = request.form["id"]
  1788. curs.execute("insert into login (user, ip, today) value ('" + pymysql.escape_string(request.form["id"]) + "', '" + pymysql.escape_string(ip) + "', '" + pymysql.escape_string(getnow()) + "')")
  1789. conn.commit()
  1790. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(data['frontpage']).replace('/','%2F') + '" />'
  1791. else:
  1792. return render_template('index.html', title = '로그인 오류', logo = data['name'], data = '비밀번호가 다릅니다.')
  1793. else:
  1794. return render_template('index.html', title = '로그인 오류', logo = data['name'], data = '없는 계정 입니다.')
  1795. else:
  1796. ip = getip(request)
  1797. ban = getban(ip)
  1798. if(ban == 1):
  1799. return '<meta http-equiv="refresh" content="0;url=/ban" />'
  1800. else:
  1801. if(session.get('Now') == True):
  1802. return render_template('index.html', title = '로그인 오류', logo = data['name'], data = '이미 로그인 되어 있습니다.')
  1803. else:
  1804. return render_template('index.html', title = '로그인', enter = '로그인', logo = data['name'], tn = 15)
  1805. @app.route('/check/<path:name>')
  1806. def check(name = None, sub = None, number = None):
  1807. curs.execute("select * from user where id = '" + pymysql.escape_string(name) + "'")
  1808. rows = curs.fetchall()
  1809. if(rows[0]['acl'] == 'owner' or rows[0]['acl'] == 'admin'):
  1810. return render_template('index.html', title = '차단 오류', logo = data['name'], data = '관리자는 검사 할 수 없습니다.')
  1811. else:
  1812. if(admincheck() == 1):
  1813. m = re.search('(?:[0-9](?:[0-9][0-9])?\.[0-9](?:[0-9][0-9])?\.[0-9](?:[0-9][0-9])?\.[0-9](?:[0-9][0-9])?)', name)
  1814. if(m):
  1815. curs.execute("select * from login where ip = '" + pymysql.escape_string(name) + "' order by today desc")
  1816. row = curs.fetchall()
  1817. if(row):
  1818. i = 0
  1819. c = ''
  1820. while True:
  1821. try:
  1822. c = c + '<table style="width: 100%;"><tbody><tr><td style="text-align: center;width:33.33%;">' + row[i]['user'] + '</td><td style="text-align: center;width:33.33%;">' + row[i]['ip'] + '</td><td style="text-align: center;width:33.33%;">' + row[i]['today'] + '</td></tr></tbody></table>'
  1823. except:
  1824. break
  1825. i = i + 1
  1826. return render_template('index.html', title = '다중 검사', logo = data['name'], tn = 22, rows = c)
  1827. else:
  1828. return render_template('index.html', title = '다중 검사', logo = data['name'], tn = 22, rows = '')
  1829. else:
  1830. curs.execute("select * from login where user = '" + pymysql.escape_string(name) + "' order by today desc")
  1831. row = curs.fetchall()
  1832. if(row):
  1833. i = 0
  1834. c = ''
  1835. while True:
  1836. try:
  1837. c = c + '<table style="width: 100%;"><tbody><tr><td style="text-align: center;width:33.33%;">' + row[i]['user'] + '</td><td style="text-align: center;width:33.33%;">' + row[i]['ip'] + '</td><td style="text-align: center;width:33.33%;">' + row[i]['today'] + '</td></tr></tbody></table>'
  1838. except:
  1839. break
  1840. i = i + 1
  1841. return render_template('index.html', title = '다중 검사', logo = data['name'], tn = 22, rows = c)
  1842. else:
  1843. return render_template('index.html', title = '다중 검사', logo = data['name'], tn = 22, rows = '')
  1844. else:
  1845. return render_template('index.html', title = '권한 오류', logo = data['name'], data = '권한이 모자랍니다.')
  1846. @app.route('/register', methods=['POST', 'GET'])
  1847. def register():
  1848. if(request.method == 'POST'):
  1849. ip = getip(request)
  1850. ban = getban(ip)
  1851. if(ban == 1):
  1852. return '<meta http-equiv="refresh" content="0;url=/ban" />'
  1853. else:
  1854. m = re.search('(?:[^A-Za-zㄱ-힣0-9 ])', request.form["id"])
  1855. if(m):
  1856. return render_template('index.html', title = '회원가입 오류', logo = data['name'], data = '아이디에는 한글과 알파벳 공백만 허용 됩니다.')
  1857. else:
  1858. if(len(request.form["id"]) > 20):
  1859. return render_template('index.html', title = '회원가입 오류', logo = data['name'], data = '아이디는 20글자보다 짧아야 합니다.')
  1860. else:
  1861. curs.execute("select * from user where id = '" + pymysql.escape_string(request.form["id"]) + "'")
  1862. rows = curs.fetchall()
  1863. if(rows):
  1864. return render_template('index.html', title = '회원가입 오류', logo = data['name'], data = '동일한 아이디의 유저가 있습니다.')
  1865. else:
  1866. hashed = bcrypt.hashpw(bytes(request.form["pw"], 'utf-8'), bcrypt.gensalt())
  1867. if(request.form["id"] == data['owner']):
  1868. curs.execute("insert into user (id, pw, acl) value ('" + pymysql.escape_string(request.form["id"]) + "', '" + pymysql.escape_string(hashed.decode()) + "', 'owner')")
  1869. else:
  1870. curs.execute("insert into user (id, pw, acl) value ('" + pymysql.escape_string(request.form["id"]) + "', '" + pymysql.escape_string(hashed.decode()) + "', 'user')")
  1871. conn.commit()
  1872. return '<meta http-equiv="refresh" content="0;url=/login" />'
  1873. else:
  1874. ip = getip(request)
  1875. ban = getban(ip)
  1876. if(ban == 1):
  1877. return '<meta http-equiv="refresh" content="0;url=/ban" />'
  1878. else:
  1879. return render_template('index.html', title = '회원가입', enter = '회원가입', logo = data['name'], tn = 15)
  1880. @app.route('/logout')
  1881. def logout():
  1882. session['Now'] = False
  1883. session.pop('DREAMER', None)
  1884. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(data['frontpage']).replace('/','%2F') + '" />'
  1885. @app.route('/ban/<path:name>', methods=['POST', 'GET'])
  1886. def ban(name = None):
  1887. curs.execute("select * from user where id = '" + pymysql.escape_string(name) + "'")
  1888. rows = curs.fetchall()
  1889. if(rows and rows[0]['acl'] == 'owner' or rows and rows[0]['acl'] == 'admin'):
  1890. return render_template('index.html', title = '차단 오류', logo = data['name'], data = '관리자는 차단 할 수 없습니다.')
  1891. else:
  1892. if(request.method == 'POST'):
  1893. if(admincheck() == 1):
  1894. ip = getip(request)
  1895. curs.execute("select * from ban where block = '" + pymysql.escape_string(name) + "'")
  1896. row = curs.fetchall()
  1897. if(row):
  1898. block(name, '해제', getnow(), ip, '')
  1899. curs.execute("delete from ban where block = '" + pymysql.escape_string(name) + "'")
  1900. else:
  1901. b = re.search("^([0-9](?:[0-9][0-9])?\.[0-9](?:[0-9][0-9])?)$", name)
  1902. if(b):
  1903. block(name, request.form["end"], getnow(), ip, request.form["why"])
  1904. curs.execute("insert into ban (block, end, why, band) value ('" + pymysql.escape_string(name) + "', '" + pymysql.escape_string(request.form["end"]) + "', '" + pymysql.escape_string(request.form["why"]) + "', 'O')")
  1905. else:
  1906. block(name, request.form["end"], getnow(), ip, request.form["why"])
  1907. curs.execute("insert into ban (block, end, why, band) value ('" + pymysql.escape_string(name) + "', '" + pymysql.escape_string(request.form["end"]) + "', '" + pymysql.escape_string(request.form["why"]) + "', '')")
  1908. conn.commit()
  1909. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(data['frontpage']).replace('/','%2F') + '" />'
  1910. else:
  1911. return render_template('index.html', title = '권한 오류', logo = data['name'], data = '권한이 모자랍니다.')
  1912. else:
  1913. if(admincheck() == 1):
  1914. curs.execute("select * from ban where block = '" + pymysql.escape_string(name) + "'")
  1915. row = curs.fetchall()
  1916. if(row):
  1917. now = '차단 해제'
  1918. else:
  1919. b = re.search("^([0-9](?:[0-9][0-9])?\.[0-9](?:[0-9][0-9])?)$", name)
  1920. if(b):
  1921. now = '대역 차단'
  1922. else:
  1923. now = '차단'
  1924. return render_template('index.html', title = name, page = parse.quote(name).replace('/','%2F'), logo = data['name'], tn = 16, now = now, today = getnow())
  1925. else:
  1926. return render_template('index.html', title = '권한 오류', logo = data['name'], data = '권한이 모자랍니다.')
  1927. @app.route('/acl/<path:name>', methods=['POST', 'GET'])
  1928. def acl(name = None):
  1929. if(request.method == 'POST'):
  1930. if(admincheck() == 1):
  1931. curs.execute("select * from data where title = '" + pymysql.escape_string(name) + "'")
  1932. row = curs.fetchall()
  1933. if(row):
  1934. if(request.form["select"] == 'admin'):
  1935. curs.execute("update data set acl = 'admin' where title = '" + pymysql.escape_string(name) + "'")
  1936. elif(request.form["select"] == 'user'):
  1937. curs.execute("update data set acl = 'user' where title = '" + pymysql.escape_string(name) + "'")
  1938. else:
  1939. curs.execute("update data set acl = '' where title = '" + pymysql.escape_string(name) + "'")
  1940. conn.commit()
  1941. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(name).replace('/','%2F') + '" />'
  1942. else:
  1943. return render_template('index.html', title = '권한 오류', logo = data['name'], data = '권한이 모자랍니다.')
  1944. else:
  1945. if(admincheck() == 1):
  1946. curs.execute("select * from data where title = '" + pymysql.escape_string(name) + "'")
  1947. row = curs.fetchall()
  1948. if(row):
  1949. if(row[0]['acl'] == 'admin'):
  1950. now = '관리자만'
  1951. elif(row[0]['acl'] == 'user'):
  1952. now = '유저 이상'
  1953. else:
  1954. now = '일반'
  1955. return render_template('index.html', title = name, page = parse.quote(name).replace('/','%2F'), logo = data['name'], tn = 19, now = '현재 ACL 상태는 ' + now)
  1956. else:
  1957. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(name).replace('/','%2F') + '" />'
  1958. else:
  1959. return render_template('index.html', title = '권한 오류', logo = data['name'], data = '권한이 모자랍니다.')
  1960. @app.route('/admin/<path:name>', methods=['POST', 'GET'])
  1961. def admin(name = None):
  1962. if(request.method == 'POST'):
  1963. if(session.get('Now') == True):
  1964. ip = getip(request)
  1965. curs.execute("select * from user where id = '" + pymysql.escape_string(ip) + "'")
  1966. rows = curs.fetchall()
  1967. if(rows):
  1968. if(rows[0]['acl'] == 'owner' or rows[0]['acl'] == 'admin'):
  1969. curs.execute("select * from user where id = '" + pymysql.escape_string(name) + "'")
  1970. row = curs.fetchall()
  1971. if(row):
  1972. if(row[0]['acl'] == 'admin' or row[0]['acl'] == 'owner'):
  1973. curs.execute("update user set acl = 'user' where id = '" + pymysql.escape_string(name) + "'")
  1974. else:
  1975. curs.execute("update user set acl = '" + pymysql.escape_string(request.form["select"]) + "' where id = '" + pymysql.escape_string(name) + "'")
  1976. conn.commit()
  1977. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(data['frontpage']).replace('/','%2F') + '" />'
  1978. else:
  1979. return render_template('index.html', title = '사용자 오류', logo = data['name'], data = '계정이 없습니다.')
  1980. else:
  1981. return render_template('index.html', title = '권한 오류', logo = data['name'], data = '권한이 모자랍니다.')
  1982. else:
  1983. return render_template('index.html', title = '권한 오류', logo = data['name'], data = '계정이 없습니다.')
  1984. else:
  1985. return render_template('index.html', title = '권한 오류', logo = data['name'], data = '비 로그인 상태 입니다.')
  1986. else:
  1987. if(session.get('Now') == True):
  1988. ip = getip(request)
  1989. curs.execute("select * from user where id = '" + pymysql.escape_string(ip) + "'")
  1990. rows = curs.fetchall()
  1991. if(rows):
  1992. if(rows[0]['acl'] == 'owner'):
  1993. curs.execute("select * from user where id = '" + pymysql.escape_string(name) + "'")
  1994. row = curs.fetchall()
  1995. if(row):
  1996. if(row[0]['acl'] == 'admin' or row[0]['acl'] == 'owner'):
  1997. now = '권한 해제'
  1998. else:
  1999. now = '권한 부여'
  2000. return render_template('index.html', title = name, page = parse.quote(name).replace('/','%2F'), logo = data['name'], tn = 18, now = now)
  2001. else:
  2002. return render_template('index.html', title = '사용자 오류', logo = data['name'], data = '계정이 없습니다.')
  2003. else:
  2004. return render_template('index.html', title = '권한 오류', logo = data['name'], data = '권한이 모자랍니다.')
  2005. else:
  2006. return render_template('index.html', title = '권한 오류', logo = data['name'], data = '계정이 없습니다.')
  2007. else:
  2008. return render_template('index.html', title = '권한 오류', logo = data['name'], data = '비 로그인 상태 입니다.')
  2009. @app.route('/grammar')
  2010. def grammar():
  2011. return render_template('index.html', title = '문법 설명', logo = data['name'], tn = 17)
  2012. @app.route('/ban')
  2013. def aban():
  2014. ip = getip(request)
  2015. if(getban(ip) == 1):
  2016. curs.execute("select * from ban where block = '" + pymysql.escape_string(ip) + "'")
  2017. rows = curs.fetchall()
  2018. if(rows):
  2019. if(rows[0]['end']):
  2020. end = rows[0]['end'] + ' 까지 차단 상태 입니다. / 사유 : ' + rows[0]['why']
  2021. now = getnow()
  2022. now = re.sub(':', '', now)
  2023. now = re.sub('\-', '', now)
  2024. now = re.sub(' ', '', now)
  2025. now = int(now)
  2026. day = rows[0]['end']
  2027. day = re.sub('\-', '', day)
  2028. if(now >= int(day + '000000')):
  2029. curs.execute("delete from ban where block = '" + pymysql.escape_string(ip) + "'")
  2030. conn.commit()
  2031. end = '차단이 풀렸습니다. 다시 시도 해 보세요.'
  2032. else:
  2033. end = '영구 차단 상태 입니다. / 사유 : ' + rows[0]['why']
  2034. else:
  2035. b = re.search("^([0-9](?:[0-9][0-9])?\.[0-9](?:[0-9][0-9])?)", ip)
  2036. if(b):
  2037. results = b.groups()
  2038. curs.execute("select * from ban where block = '" + pymysql.escape_string(results[0]) + "' and band = 'O'")
  2039. row = curs.fetchall()
  2040. if(row):
  2041. if(row[0]['end']):
  2042. end = row[0]['end'] + ' 까지 차단 상태 입니다. / 사유 : ' + rows[0]['why']
  2043. now = getnow()
  2044. now = re.sub(':', '', now)
  2045. now = re.sub('\-', '', now)
  2046. now = re.sub(' ', '', now)
  2047. now = int(now)
  2048. day = row[0]['end']
  2049. day = re.sub('\-', '', day)
  2050. if(now >= int(day + '000000')):
  2051. curs.execute("delete from ban where block = '" + pymysql.escape_string(results[0]) + "' and band = 'O'")
  2052. conn.commit()
  2053. end = '차단이 풀렸습니다. 다시 시도 해 보세요.'
  2054. else:
  2055. end = '영구 차단 상태 입니다. / 사유 : ' + row[0]['why']
  2056. else:
  2057. end = '권한이 맞지 않는 상태 입니다.'
  2058. return render_template('index.html', title = '권한 오류', logo = data['name'], data = end)
  2059. @app.route('/w/<path:name>/r/<a>/diff/<b>')
  2060. def diff(name = None, a = None, b = None):
  2061. curs.execute("select * from history where id = '" + pymysql.escape_string(a) + "' and title = '" + pymysql.escape_string(name) + "'")
  2062. rows = curs.fetchall()
  2063. if(rows):
  2064. curs.execute("select * from history where id = '" + pymysql.escape_string(b) + "' and title = '" + pymysql.escape_string(name) + "'")
  2065. row = curs.fetchall()
  2066. if(row):
  2067. indata = re.sub('<', '&lt;', rows[0]['data'])
  2068. indata = re.sub('>', '&gt;', indata)
  2069. indata = re.sub('"', '&quot;', indata)
  2070. indata = re.sub('\n', '<br>', indata)
  2071. enddata = re.sub('<', '&lt;', row[0]['data'])
  2072. enddata = re.sub('>', '&gt;', enddata)
  2073. enddata = re.sub('"', '&quot;', enddata)
  2074. enddata = re.sub('\n', '<br>', enddata)
  2075. sm = difflib.SequenceMatcher(None, indata, enddata)
  2076. c = show_diff(sm)
  2077. return render_template('index.html', title = 'Diff', logo = data['name'], data = c)
  2078. else:
  2079. return render_template('index.html', title = 'Diff 오류', logo = data['name'], data = '<a href="/w/' + name + '">이 리비전이나 문서가 없습니다.</a>')
  2080. else:
  2081. return render_template('index.html', title = 'Diff 오류', logo = data['name'], data = '<a href="/w/' + name + '">이 리비전이나 문서가 없습니다.</a>')
  2082. @app.route('/version')
  2083. def version():
  2084. return render_template('index.html', title = '버전', logo = data['name'], tn = 14)
  2085. @app.route('/user')
  2086. def user():
  2087. ip = getip(request)
  2088. curs.execute("select * from user where id = '" + pymysql.escape_string(ip) + "'")
  2089. rows = curs.fetchall()
  2090. if(getban(ip) == 0):
  2091. if(rows):
  2092. if(rows[0]['acl'] == 'admin' or rows[0]['acl'] == 'owner'):
  2093. if(rows[0]['acl'] == 'admin'):
  2094. acl = '관리자'
  2095. else:
  2096. acl = '소유자'
  2097. else:
  2098. acl = '유저'
  2099. else:
  2100. acl = '일반'
  2101. else:
  2102. acl = '차단'
  2103. return render_template('index.html', title = '유저 메뉴', logo = data['name'], data = ip + '<br><br><span>권한 상태 : ' + acl + '<br><br><li><a href="/login">로그인</a></li><li><a href="/logout">로그아웃</a></li><li><a href="/register">회원가입</a></li>')
  2104. @app.route('/random')
  2105. def random():
  2106. curs.execute("select * from data order by rand() limit 1")
  2107. rows = curs.fetchall()
  2108. if(rows):
  2109. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(rows[0]['title']).replace('/','%2F') + '" />'
  2110. else:
  2111. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(data['frontpage']).replace('/','%2F') + '" />'
  2112. @app.errorhandler(404)
  2113. def uncaughtError(error):
  2114. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(data['frontpage']).replace('/','%2F') + '" />'
  2115. if __name__ == '__main__':
  2116. app.run(host = '0.0.0.0', port = int(data['port']), threaded = True)