app.py 171 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394139513961397139813991400140114021403140414051406140714081409141014111412141314141415141614171418141914201421142214231424142514261427142814291430143114321433143414351436143714381439144014411442144314441445144614471448144914501451145214531454145514561457145814591460146114621463146414651466146714681469147014711472147314741475147614771478147914801481148214831484148514861487148814891490149114921493149414951496149714981499150015011502150315041505150615071508150915101511151215131514151515161517151815191520152115221523152415251526152715281529153015311532153315341535153615371538153915401541154215431544154515461547154815491550155115521553155415551556155715581559156015611562156315641565156615671568156915701571157215731574157515761577157815791580158115821583158415851586158715881589159015911592159315941595159615971598159916001601160216031604160516061607160816091610161116121613161416151616161716181619162016211622162316241625162616271628162916301631163216331634163516361637163816391640164116421643164416451646164716481649165016511652165316541655165616571658165916601661166216631664166516661667166816691670167116721673167416751676167716781679168016811682168316841685168616871688168916901691169216931694169516961697169816991700170117021703170417051706170717081709171017111712171317141715171617171718171917201721172217231724172517261727172817291730173117321733173417351736173717381739174017411742174317441745174617471748174917501751175217531754175517561757175817591760176117621763176417651766176717681769177017711772177317741775177617771778177917801781178217831784178517861787178817891790179117921793179417951796179717981799180018011802180318041805180618071808180918101811181218131814181518161817181818191820182118221823182418251826182718281829183018311832183318341835183618371838183918401841184218431844184518461847184818491850185118521853185418551856185718581859186018611862186318641865186618671868186918701871187218731874187518761877187818791880188118821883188418851886188718881889189018911892189318941895189618971898189919001901190219031904190519061907190819091910191119121913191419151916191719181919192019211922192319241925192619271928192919301931193219331934193519361937193819391940194119421943194419451946194719481949195019511952195319541955195619571958195919601961196219631964196519661967196819691970197119721973197419751976197719781979198019811982198319841985198619871988198919901991199219931994199519961997199819992000200120022003200420052006200720082009201020112012201320142015201620172018201920202021202220232024202520262027202820292030203120322033203420352036203720382039204020412042204320442045204620472048204920502051205220532054205520562057205820592060206120622063206420652066206720682069207020712072207320742075207620772078207920802081208220832084208520862087208820892090209120922093209420952096209720982099210021012102210321042105210621072108210921102111211221132114211521162117211821192120212121222123212421252126212721282129213021312132213321342135213621372138213921402141214221432144214521462147214821492150215121522153215421552156215721582159216021612162216321642165216621672168216921702171217221732174217521762177217821792180218121822183218421852186218721882189219021912192219321942195219621972198219922002201220222032204220522062207220822092210221122122213221422152216221722182219222022212222222322242225222622272228222922302231223222332234223522362237223822392240224122422243224422452246224722482249225022512252225322542255225622572258225922602261226222632264226522662267226822692270227122722273227422752276227722782279228022812282228322842285228622872288228922902291229222932294229522962297229822992300230123022303230423052306230723082309231023112312231323142315231623172318231923202321232223232324232523262327232823292330233123322333233423352336233723382339234023412342234323442345234623472348234923502351235223532354235523562357235823592360236123622363236423652366236723682369237023712372237323742375237623772378237923802381238223832384238523862387238823892390239123922393239423952396239723982399240024012402240324042405240624072408240924102411241224132414241524162417241824192420242124222423242424252426242724282429243024312432243324342435243624372438243924402441244224432444244524462447244824492450245124522453245424552456245724582459246024612462246324642465246624672468246924702471247224732474247524762477247824792480248124822483248424852486248724882489249024912492249324942495249624972498249925002501250225032504250525062507250825092510251125122513251425152516251725182519252025212522252325242525252625272528252925302531253225332534253525362537253825392540254125422543254425452546254725482549255025512552255325542555255625572558255925602561256225632564256525662567256825692570257125722573257425752576257725782579258025812582258325842585258625872588258925902591259225932594259525962597259825992600260126022603260426052606260726082609261026112612261326142615261626172618261926202621262226232624262526262627262826292630263126322633263426352636263726382639264026412642264326442645264626472648264926502651265226532654265526562657265826592660266126622663266426652666266726682669267026712672267326742675267626772678267926802681268226832684268526862687268826892690269126922693269426952696269726982699270027012702270327042705270627072708270927102711271227132714271527162717271827192720272127222723272427252726272727282729273027312732273327342735273627372738273927402741274227432744274527462747274827492750275127522753275427552756275727582759276027612762276327642765276627672768276927702771277227732774277527762777277827792780278127822783278427852786278727882789279027912792279327942795279627972798279928002801280228032804280528062807280828092810281128122813281428152816281728182819282028212822282328242825282628272828282928302831283228332834283528362837283828392840284128422843284428452846284728482849285028512852285328542855285628572858285928602861286228632864286528662867286828692870287128722873287428752876287728782879288028812882288328842885288628872888288928902891289228932894289528962897289828992900290129022903290429052906290729082909291029112912291329142915291629172918291929202921292229232924292529262927292829292930293129322933293429352936293729382939294029412942294329442945294629472948294929502951295229532954295529562957295829592960296129622963296429652966296729682969297029712972297329742975297629772978297929802981298229832984298529862987298829892990299129922993299429952996299729982999300030013002300330043005300630073008300930103011301230133014301530163017301830193020302130223023302430253026302730283029303030313032303330343035303630373038303930403041304230433044304530463047304830493050305130523053305430553056305730583059306030613062306330643065306630673068306930703071307230733074307530763077307830793080308130823083308430853086308730883089309030913092309330943095309630973098309931003101310231033104310531063107310831093110311131123113311431153116311731183119312031213122312331243125312631273128312931303131313231333134313531363137313831393140314131423143314431453146314731483149315031513152315331543155315631573158315931603161316231633164316531663167316831693170317131723173317431753176317731783179318031813182318331843185318631873188318931903191319231933194319531963197319831993200320132023203320432053206320732083209321032113212321332143215321632173218321932203221
  1. from flask import Flask, request, session, render_template, send_file
  2. app = Flask(__name__)
  3. from urllib import parse
  4. import json
  5. import pymysql
  6. import time
  7. import re
  8. import bcrypt
  9. import os
  10. import difflib
  11. json_data = open('set.json').read()
  12. data = json.loads(json_data)
  13. print('오픈나무 시작 포트 : ' + data['port'])
  14. import logging
  15. log = logging.getLogger('werkzeug')
  16. log.setLevel(logging.ERROR)
  17. app.config['MAX_CONTENT_LENGTH'] = int(data['upload']) * 1024 * 1024
  18. try:
  19. conn = pymysql.connect(host = data['host'], user = data['user'], password = data['pw'], db = data['db'], charset = 'utf8mb4')
  20. curs = conn.cursor(pymysql.cursors.DictCursor)
  21. try:
  22. curs.execute("select * from data limit 1")
  23. except:
  24. curs.execute("create table data(title text, data longtext, acl text)")
  25. try:
  26. curs.execute("select * from history limit 1")
  27. except:
  28. curs.execute("create table history(id text, title text, data longtext, date text, ip text, send text, leng text)")
  29. try:
  30. curs.execute("select * from rd limit 1")
  31. except:
  32. curs.execute("create table rd(title text, sub text, date text)")
  33. try:
  34. curs.execute("select * from user limit 1")
  35. except:
  36. curs.execute("create table user(id text, pw text, acl text)")
  37. try:
  38. curs.execute("select * from ban limit 1")
  39. except:
  40. curs.execute("create table ban(block text, end text, why text, band text)")
  41. try:
  42. curs.execute("select * from topic limit 1")
  43. except:
  44. curs.execute("create table topic(id text, title text, sub text, data longtext, date text, ip text, block text)")
  45. try:
  46. curs.execute("select * from stop limit 1")
  47. except:
  48. curs.execute("create table stop(title text, sub text, close text)")
  49. try:
  50. curs.execute("select * from rb limit 1")
  51. except:
  52. curs.execute("create table rb(block text, end text, today text, blocker text, why text)")
  53. try:
  54. curs.execute("select * from login limit 1")
  55. except:
  56. curs.execute("create table login(user text, ip text, today text)")
  57. try:
  58. curs.execute("select * from back limit 1")
  59. except:
  60. curs.execute("create table back(title text, link text, type text)")
  61. try:
  62. curs.execute("select * from cat limit 1")
  63. except:
  64. curs.execute("create table cat(title text, cat text)")
  65. except:
  66. conn = pymysql.connect(host = data['host'], user = data['user'], password = data['pw'], charset = 'utf8mb4')
  67. curs = conn.cursor(pymysql.cursors.DictCursor)
  68. curs.execute("create database " + data['db'])
  69. curs.execute("alter database " + data['db'] + " character set = utf8mb4 collate = utf8mb4_unicode_ci")
  70. curs.execute("use " + data['db'])
  71. try:
  72. curs.execute("select * from data limit 1")
  73. except:
  74. curs.execute("create table data(title text, data longtext, acl text)")
  75. try:
  76. curs.execute("select * from history limit 1")
  77. except:
  78. curs.execute("create table history(id text, title text, data longtext, date text, ip text, send text, leng text)")
  79. try:
  80. curs.execute("select * from rd limit 1")
  81. except:
  82. curs.execute("create table rd(title text, sub text, date text)")
  83. try:
  84. curs.execute("select * from user limit 1")
  85. except:
  86. curs.execute("create table user(id text, pw text, acl text)")
  87. try:
  88. curs.execute("select * from ban limit 1")
  89. except:
  90. curs.execute("create table ban(block text, end text, why text, band text)")
  91. try:
  92. curs.execute("select * from topic limit 1")
  93. except:
  94. curs.execute("create table topic(id text, title text, sub text, data longtext, date text, ip text, block text)")
  95. try:
  96. curs.execute("select * from stop limit 1")
  97. except:
  98. curs.execute("create table stop(title text, sub text, close text)")
  99. try:
  100. curs.execute("select * from rb limit 1")
  101. except:
  102. curs.execute("create table rb(block text, end text, today text, blocker text, why text)")
  103. try:
  104. curs.execute("select * from login limit 1")
  105. except:
  106. curs.execute("create table login(user text, ip text, today text)")
  107. try:
  108. curs.execute("select * from back limit 1")
  109. except:
  110. curs.execute("create table back(title text, link text, type text)")
  111. try:
  112. curs.execute("select * from cat limit 1")
  113. except:
  114. curs.execute("create table cat(title text, cat text)")
  115. app.secret_key = data['key']
  116. def show_diff(seqm):
  117. output= []
  118. for opcode, a0, a1, b0, b1 in seqm.get_opcodes():
  119. if(opcode == 'equal'):
  120. output.append(seqm.a[a0:a1])
  121. elif(opcode == 'insert'):
  122. output.append("<span style='background:#CFC;'>" + seqm.b[b0:b1] + "</span>")
  123. elif(opcode == 'delete'):
  124. output.append("<span style='background:#FDD;'>" + seqm.a[a0:a1] + "</span>")
  125. return ''.join(output)
  126. def admincheck():
  127. if(session.get('Now') == True):
  128. ip = getip(request)
  129. curs.execute("select * from user where id = '" + pymysql.escape_string(ip) + "'")
  130. rows = curs.fetchall()
  131. if(rows):
  132. if(rows[0]['acl'] == 'owner' or rows[0]['acl'] == 'admin'):
  133. return 1
  134. def namumark(title, data):
  135. while True:
  136. m = re.search("<((?:\/)?(?:div|span|embed|iframe)(?:[^>]*))>", data)
  137. if(m):
  138. g = m.groups()
  139. n = re.search('src="http(?:s)?:\/\/([^\/]*)\/(?:[^"]*)"', g[0])
  140. if(n):
  141. gm = n.groups()
  142. print(gm[0])
  143. if(gm[0] == "www.youtube.com" or gm[0] == "serviceapi.nmv.naver.com" or gm[0] == "tv.kakao.com" or gm[0] == "tvple.com" or gm[0] == "tvpot.daum.net"):
  144. print('1')
  145. r = g[0]
  146. else:
  147. print('2')
  148. r = re.sub('src="([^"]*)"', '', g[0])
  149. else:
  150. r = g[0]
  151. r = re.sub('"', '#.#', r)
  152. data = re.sub("<((?:\/)?(?:div|span|embed|iframe)(?:[^>]*))>", "[" + r + "]", data, 1)
  153. else:
  154. break
  155. data = re.sub('<', '&lt;', data)
  156. data = re.sub('>', '&gt;', data)
  157. data = re.sub('"', '&quot;', data)
  158. data = re.sub("\[(?P<in>(?:\/)?(?:div|span|embed|iframe)(?:[^\]]*))\]", "<\g<in>>", data)
  159. data = re.sub('#.#', '"', data)
  160. jjjj = 0
  161. while True:
  162. p = re.compile("{{{((?:(?!{{{)(?!}}}).)*)}}}", re.DOTALL)
  163. m = p.search(data)
  164. if(m):
  165. results = m.groups()
  166. q = re.compile("^\+([1-5])\s(.*)$", re.DOTALL)
  167. n = q.search(results[0])
  168. w = re.compile("^\-([1-5])\s(.*)$", re.DOTALL)
  169. a = w.search(results[0])
  170. e = re.compile("^(#[0-9a-f-A-F]{6})\s(.*)$", re.DOTALL)
  171. b = e.search(results[0])
  172. r = re.compile("^(#[0-9a-f-A-F]{3})\s(.*)$", re.DOTALL)
  173. c = r.search(results[0])
  174. t = re.compile("^#(\w+)\s(.*)$", re.DOTALL)
  175. d = t.search(results[0])
  176. qqq = re.compile("^@([0-9a-f-A-F]{6})\s(.*)$", re.DOTALL)
  177. qqe = qqq.search(results[0])
  178. qqw = re.compile("^@([0-9a-f-A-F]{3})\s(.*)$", re.DOTALL)
  179. qqa = qqw.search(results[0])
  180. qwe = re.compile("^@(\w+)\s(.*)$", re.DOTALL)
  181. qsd = qwe.search(results[0])
  182. qawe = re.compile("^#!noin\s(.*)$", re.DOTALL)
  183. qasd = qawe.search(results[0])
  184. y = re.compile("^#!wiki\sstyle=&quot;((?:(?!&quot;|\n).)*)&quot;\n?\s\n(.*)$", re.DOTALL)
  185. l = y.search(results[0])
  186. ppp = re.compile("^#!folding\s((?:(?!\n).)*)\n?\s\n(.*)$", re.DOTALL)
  187. ooo = ppp.search(results[0])
  188. if(n):
  189. result = n.groups()
  190. data = p.sub('<span class="font-size-' + result[0] + '">' + result[1] + '</span>', data, 1)
  191. elif(a):
  192. result = a.groups()
  193. data = p.sub('<span class="font-size-small-' + result[0] + '">' + result[1] + '</span>', data, 1)
  194. elif(b):
  195. result = b.groups()
  196. data = p.sub('<span style="color:' + result[0] + '">' + result[1] + '</span>', data, 1)
  197. elif(c):
  198. result = c.groups()
  199. data = p.sub('<span style="color:' + result[0] + '">' + result[1] + '</span>', data, 1)
  200. elif(d):
  201. result = d.groups()
  202. data = p.sub('<span style="color:' + result[0] + '">' + result[1] + '</span>', data, 1)
  203. elif(qqe):
  204. result = qqe.groups()
  205. data = p.sub('<span style="background:#' + result[0] + '">' + result[1] + '</span>', data, 1)
  206. elif(qqa):
  207. result = qqa.groups()
  208. data = p.sub('<span style="background:#' + result[0] + '">' + result[1] + '</span>', data, 1)
  209. elif(qsd):
  210. result = qsd.groups()
  211. data = p.sub('<span style="background:' + result[0] + '">' + result[1] + '</span>', data, 1)
  212. elif(l):
  213. result = l.groups()
  214. data = p.sub('<div style="' + result[0] + '">' + result[1] + '</div>', data, 1)
  215. elif(ooo):
  216. result = ooo.groups()
  217. data = p.sub("<div>" + result[0] + "<span style='float:right;'><div id='folding_" + str(jjjj + 1) + "' style='display:block;'>[<a href='javascript:void(0);' onclick='var f=document.getElementById(\"folding_" + str(jjjj) + "\");var s=f.style.display==\"block\";f.style.display=s?\"none\":\"block\";this.className=s?\"\":\"opened\";var f=document.getElementById(\"folding_" + str(jjjj + 1) + "\");var s=f.style.display==\"none\";f.style.display=s?\"block\":\"none\";var f=document.getElementById(\"folding_" + str(jjjj + 2) + "\");var s=f.style.display==\"block\";f.style.display=s?\"none\":\"block\";'>펼치기</a>]</div><div id='folding_" + str(jjjj + 2) + "' style='display:none;'>[<a href='javascript:void(0);' onclick='var f=document.getElementById(\"folding_" + str(jjjj) + "\");var s=f.style.display==\"block\";f.style.display=s?\"none\":\"block\";this.className=s?\"\":\"opened\";var f=document.getElementById(\"folding_" + str(jjjj + 1) + "\");var s=f.style.display==\"none\";f.style.display=s?\"block\":\"none\";var f=document.getElementById(\"folding_" + str(jjjj + 2) + "\");var s=f.style.display==\"block\";f.style.display=s?\"none\":\"block\";'>접기</a>]</div></a></span><div id='folding_" + str(jjjj) + "' style='display:none;'><br>" + result[1] + "</div></div>", data, 1)
  218. jjjj = jjjj + 3
  219. elif(qasd):
  220. result = qasd.groups()
  221. data = p.sub(result[0], data, 1)
  222. else:
  223. data = p.sub('<code>' + results[0] + '</code>', data, 1)
  224. else:
  225. break
  226. while True:
  227. a = re.compile("<code>(((?!<\/code>).)*)<\/code>", re.DOTALL)
  228. m = a.search(data)
  229. if(m):
  230. g = m.groups()
  231. j = re.sub("<\/span>", "}}}", g[0])
  232. j = re.sub("<\/div>", "}}}", j)
  233. j = re.sub('<span class="font\-size\-(?P<in>[1-6])">', "{{{+\g<in> ", j)
  234. j = re.sub('<span class="font\-size\-small\-(?P<in>[1-6])">', "{{{-\g<in> ", j)
  235. j = re.sub('<span style="color:(?:#)?(?P<in>[^"]*)">', "{{{#\g<in> ", j)
  236. j = re.sub('<span style="background:(?:#)?(?P<in>[^"]*)">', "{{{@\g<in> ", j)
  237. j = re.sub('<div style="(?P<in>[^"]*)">', "{{{#!wiki style=&quot;\g<in>&quot;\n", j)
  238. j = re.sub("(?P<in>.)", "<span>\g<in></span>", j)
  239. data = a.sub(j, data, 1)
  240. else:
  241. break
  242. data = re.sub("<span>&</span><span>l</span><span>t</span><span>;</span>", "<span>&lt;</span>", data)
  243. data = re.sub("<span>&</span><span>g</span><span>t</span><span>;</span>", "<span>&gt;</span>", data)
  244. data = re.sub("\[anchor\((?P<in>[^\[\]]*)\)\]", '<span id="\g<in>"></span>', data)
  245. data = re.sub('\[date\(now\)\]', getnow(), data)
  246. while True:
  247. m = re.search("\[include\(((?:(?!\)\]|,).)*)((?:,\s?(?:[^)]*))+)?\)\]", data)
  248. if(m):
  249. results = m.groups()
  250. if(results[0] == title):
  251. data = re.sub("\[include\(((?:(?!\)\]|,).)*)((?:,\s?(?:[^)]*))+)?\)\]", "<b>" + results[0] + "</b>", data, 1)
  252. else:
  253. curs.execute("select * from data where title = '" + pymysql.escape_string(results[0]) + "'")
  254. rows = curs.fetchall()
  255. if(rows):
  256. curs.execute("select * from back where title = '" + pymysql.escape_string(results[0]) + "' and link = '" + pymysql.escape_string(title) + "' and type = 'include'")
  257. abb = curs.fetchall()
  258. if(not abb):
  259. curs.execute("insert into back (title, link, type) value ('" + pymysql.escape_string(results[0]) + "', '" + pymysql.escape_string(title) + "', 'include')")
  260. conn.commit()
  261. enddata = rows[0]['data']
  262. enddata = re.sub("\[include\(((?:(?!\)\]|,).)*)((?:,\s?(?:[^)]*))+)?\)\]", "", enddata)
  263. enddata = re.sub('<', '&lt;', enddata)
  264. enddata = re.sub('>', '&gt;', enddata)
  265. enddata = re.sub('"', '&quot;', enddata)
  266. while True:
  267. p = re.compile("{{{((?:(?!{)(?!}).)*)}}}", re.DOTALL)
  268. m = p.search(enddata)
  269. if(m):
  270. nnn = m.groups()
  271. q = re.compile("^\+([1-5])\s(.*)$", re.DOTALL)
  272. n = q.search(nnn[0])
  273. w = re.compile("^\-([1-5])\s(.*)$", re.DOTALL)
  274. a = w.search(nnn[0])
  275. e = re.compile("^(#[0-9a-f-A-F]{6})\s(.*)$", re.DOTALL)
  276. b = e.search(nnn[0])
  277. r = re.compile("^(#[0-9a-f-A-F]{3})\s(.*)$", re.DOTALL)
  278. c = r.search(nnn[0])
  279. t = re.compile("^#(\w+)\s(.*)$", re.DOTALL)
  280. d = t.search(nnn[0])
  281. qqq = re.compile("^@([0-9a-f-A-F]{6})\s(.*)$", re.DOTALL)
  282. qqe = qqq.search(nnn[0])
  283. qqw = re.compile("^@([0-9a-f-A-F]{3})\s(.*)$", re.DOTALL)
  284. qqa = qqw.search(nnn[0])
  285. qwe = re.compile("^@(\w+)\s(.*)$", re.DOTALL)
  286. qsd = qwe.search(nnn[0])
  287. qawe = re.compile("^#!noin\s(.*)$", re.DOTALL)
  288. qasd = qawe.search(nnn[0])
  289. y = re.compile("^#!wiki\sstyle=&quot;((?:(?!&quot;|\n).)*)&quot;\n?\s\n(.*)$", re.DOTALL)
  290. l = y.search(nnn[0])
  291. ppp = re.compile("^#!folding\s((?:(?!\n).)*)\n?\s\n(.*)$", re.DOTALL)
  292. ooo = ppp.search(nnn[0])
  293. if(n):
  294. result = n.groups()
  295. enddata = p.sub('<span class="font-size-' + result[0] + '">' + result[1] + '</span>', enddata, 1)
  296. elif(a):
  297. result = a.groups()
  298. enddata = p.sub('<span class="font-size-small-' + result[0] + '">' + result[1] + '</span>', enddata, 1)
  299. elif(b):
  300. result = b.groups()
  301. enddata = p.sub('<span style="color:' + result[0] + '">' + result[1] + '</span>', enddata, 1)
  302. elif(c):
  303. result = c.groups()
  304. enddata = p.sub('<span style="color:' + result[0] + '">' + result[1] + '</span>', enddata, 1)
  305. elif(d):
  306. result = d.groups()
  307. enddata = p.sub('<span style="color:' + result[0] + '">' + result[1] + '</span>', enddata, 1)
  308. elif(qqe):
  309. result = qqe.groups()
  310. enddata = p.sub('<span style="background:#' + result[0] + '">' + result[1] + '</span>', enddata, 1)
  311. elif(qqa):
  312. result = qqa.groups()
  313. enddata = p.sub('<span style="background:#' + result[0] + '">' + result[1] + '</span>', enddata, 1)
  314. elif(qsd):
  315. result = qsd.groups()
  316. enddata = p.sub('<span style="background:' + result[0] + '">' + result[1] + '</span>', enddata, 1)
  317. elif(l):
  318. result = l.groups()
  319. enddata = p.sub('<div style="' + result[0] + '">' + result[1] + '</div>', enddata, 1)
  320. elif(ooo):
  321. result = ooo.groups()
  322. enddata = p.sub("<div>" + result[0] + "<span style='float:right;'><div id='folding_" + str(jjjj + 1) + "' style='display:block;'>[<a href='javascript:void(0);' onclick='var f=document.getElementById(\"folding_" + str(jjjj) + "\");var s=f.style.display==\"block\";f.style.display=s?\"none\":\"block\";this.className=s?\"\":\"opened\";var f=document.getElementById(\"folding_" + str(jjjj + 1) + "\");var s=f.style.display==\"none\";f.style.display=s?\"block\":\"none\";var f=document.getElementById(\"folding_" + str(jjjj + 2) + "\");var s=f.style.display==\"block\";f.style.display=s?\"none\":\"block\";'>펼치기</a>]</div><div id='folding_" + str(jjjj + 2) + "' style='display:none;'>[<a href='javascript:void(0);' onclick='var f=document.getElementById(\"folding_" + str(jjjj) + "\");var s=f.style.display==\"block\";f.style.display=s?\"none\":\"block\";this.className=s?\"\":\"opened\";var f=document.getElementById(\"folding_" + str(jjjj + 1) + "\");var s=f.style.display==\"none\";f.style.display=s?\"block\":\"none\";var f=document.getElementById(\"folding_" + str(jjjj + 2) + "\");var s=f.style.display==\"block\";f.style.display=s?\"none\":\"block\";'>접기</a>]</div></a></span><div id='folding_" + str(jjjj) + "' style='display:none;'><br>" + result[1] + "</div></div>", enddata, 1)
  323. jjjj = jjjj + 3
  324. elif(qasd):
  325. enddata = p.sub("", enddata, 1)
  326. else:
  327. enddata = p.sub('<code>' + nnn[0] + '</code>', enddata, 1)
  328. else:
  329. break
  330. while True:
  331. a = re.compile("<code>(((?!<\/code>).)*)<\/code>", re.DOTALL)
  332. m = a.search(enddata)
  333. if(m):
  334. g = m.groups()
  335. j = re.sub("<\/span>", "}}}", g[0])
  336. j = re.sub("<\/div>", "}}}", j)
  337. j = re.sub('<span class="font\-size\-(?P<in>[1-6])">', "{{{+\g<in> ", j)
  338. j = re.sub('<span class="font\-size\-small\-(?P<in>[1-6])">', "{{{-\g<in> ", j)
  339. j = re.sub('<span style="color:(?:#)?(?P<in>[^"]*)">', "{{{#\g<in> ", j)
  340. j = re.sub('<span style="background:(?:#)?(?P<in>[^"]*)">', "{{{@\g<in> ", j)
  341. j = re.sub('<div style="(?P<in>[^"]*)">', "{{{#!wiki style=&quot;\g<in>&quot;\n", j)
  342. j = re.sub("(?P<in>.)", "<span>\g<in></span>", j)
  343. enddata = a.sub(j, enddata, 1)
  344. else:
  345. break
  346. enddata = re.sub("<span>&</span><span>l</span><span>t</span><span>;</span>", "<span>&lt;</span>", enddata)
  347. enddata = re.sub("<span>&</span><span>g</span><span>t</span><span>;</span>", "<span>&gt;</span>", enddata)
  348. if(results[1]):
  349. a = results[1]
  350. while True:
  351. g = re.search("([^= ,]*)\=([^,]*)", a)
  352. if(g):
  353. result = g.groups()
  354. enddata = re.sub("@" + result[0] + "@", result[1], enddata)
  355. a = re.sub("([^= ,]*)\=([^,]*)", "", a, 1)
  356. else:
  357. break
  358. data = re.sub("\[include\(((?:(?!\)\]|,).)*)((?:,\s?(?:[^)]*))+)?\)\]", '<div>' + enddata + '</div>\n', data, 1)
  359. else:
  360. data = re.sub("\[include\(((?:(?!\)\]|,).)*)((?:,\s?(?:[^)]*))+)?\)\]", "[[" + results[0] + "]]", data, 1)
  361. else:
  362. break
  363. while True:
  364. m = re.search('^#(?:redirect|넘겨주기)\s([^\n]*)', data)
  365. if(m):
  366. results = m.groups()
  367. aa = re.search("^(.*)(#(?:.*))$", results[0])
  368. if(aa):
  369. results = aa.groups()
  370. data = re.sub('^#(?:redirect|넘겨주기)\s([^\n]*)', '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(results[0]).replace('/','%2F') + '/from/' + parse.quote(title).replace('/','%2F') + results[1] + '" />', data, 1)
  371. else:
  372. data = re.sub('^#(?:redirect|넘겨주기)\s([^\n]*)', '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(results[0]).replace('/','%2F') + '/from/' + parse.quote(title).replace('/','%2F') + '" />', data, 1)
  373. curs.execute("select * from back where title = '" + pymysql.escape_string(results[0]) + "' and link = '" + pymysql.escape_string(title) + "' and type = 'redirect'")
  374. abb = curs.fetchall()
  375. if(not abb):
  376. curs.execute("insert into back (title, link, type) value ('" + pymysql.escape_string(results[0]) + "', '" + pymysql.escape_string(title) + "', 'redirect')")
  377. conn.commit()
  378. else:
  379. break
  380. data = '\n' + data + '\n'
  381. while True:
  382. m = re.search("\n&gt;\s?((?:[^\n]*)(?:(?:(?:(?:\n&gt;\s?)(?:[^\n]*))+)?))", data)
  383. if(m):
  384. result = m.groups()
  385. blockquote = result[0]
  386. blockquote = re.sub("\n&gt;\s?", "\n", blockquote)
  387. data = re.sub("\n&gt;\s?((?:[^\n]*)(?:(?:(?:(?:\n&gt;\s?)(?:[^\n]*))+)?))", "\n<blockquote>" + blockquote + "</blockquote>", data, 1)
  388. else:
  389. break
  390. m = re.search('\[목차\]', data)
  391. if(not m):
  392. data = re.sub("(?P<in>(={1,6})\s?([^=]*)\s?(?:={1,6})(?:\s+)?\n)", "[목차]\n\g<in>", data, 1)
  393. i = 0
  394. h0c = 0
  395. h1c = 0
  396. h2c = 0
  397. h3c = 0
  398. h4c = 0
  399. h5c = 0
  400. last = 0
  401. rtoc = '<div id="toc"><span id="toc-name">목차</span><br><br>'
  402. while True:
  403. i = i + 1
  404. m = re.search('(={1,6})\s?([^=]*)\s?(?:={1,6})(?:\s+)?\n', data)
  405. if(m):
  406. result = m.groups()
  407. wiki = len(result[0])
  408. if(last < wiki):
  409. last = wiki
  410. else:
  411. last = wiki;
  412. if(wiki == 1):
  413. h1c = 0
  414. h2c = 0
  415. h3c = 0
  416. h4c = 0
  417. h5c = 0
  418. elif(wiki == 2):
  419. h2c = 0
  420. h3c = 0
  421. h4c = 0
  422. h5c = 0
  423. elif(wiki == 3):
  424. h3c = 0
  425. h4c = 0
  426. h5c = 0
  427. elif(wiki == 4):
  428. h4c = 0
  429. h5c = 0
  430. elif(wiki == 5):
  431. h5c = 0
  432. if(wiki == 1):
  433. h0c = h0c + 1
  434. elif(wiki == 2):
  435. h1c = h1c + 1
  436. elif(wiki == 3):
  437. h2c = h2c + 1
  438. elif(wiki == 4):
  439. h3c = h3c + 1
  440. elif(wiki == 5):
  441. h4c = h4c + 1
  442. else:
  443. h5c = h5c + 1
  444. toc = str(h0c) + '.' + str(h1c) + '.' + str(h2c) + '.' + str(h3c) + '.' + str(h4c) + '.' + str(h5c) + '.'
  445. toc = re.sub("(?P<in>[0-9]0(?:[0]*)?)\.", '\g<in>#.', toc)
  446. toc = re.sub("0\.", '', toc)
  447. toc = re.sub("#\.", '.', toc)
  448. toc = re.sub("\.$", '', toc)
  449. rtoc = rtoc + '<a href="#s-' + toc + '">' + toc + '</a>. ' + result[1] + '<br>'
  450. c = re.sub(" $", "", result[1])
  451. data = re.sub('(={1,6})\s?([^=]*)\s?(?:={1,6})(?:\s+)?\n', '<h' + str(wiki) + ' id="' + c + '"><a href="#toc" id="s-' + toc + '">' + toc + '.</a> ' + c + ' <span style="font-size:11px;">[<a href="/edit/' + parse.quote(title).replace('/','%2F') + '/section/' + str(i) + '">편집</a>]</span></h' + str(wiki) + '>', data, 1);
  452. else:
  453. rtoc = rtoc + '</div>'
  454. break
  455. data = re.sub("\[목차\]", rtoc, data)
  456. category = ''
  457. while True:
  458. m = re.search("\[\[(분류:(?:(?:(?!\]\]).)*))\]\]", data)
  459. if(m):
  460. g = m.groups()
  461. if(not title == g[0]):
  462. curs.execute("select * from cat where title = '" + pymysql.escape_string(g[0]) + "' and cat = '" + pymysql.escape_string(title) + "'")
  463. abb = curs.fetchall()
  464. if(not abb):
  465. curs.execute("insert into cat (title, cat) value ('" + pymysql.escape_string(g[0]) + "', '" + pymysql.escape_string(title) + "')")
  466. conn.commit()
  467. if(category == ''):
  468. category = category + '<a href="/w/' + parse.quote(g[0]).replace('/','%2F') + '">' + re.sub("분류:", "", g[0]) + '</a>'
  469. else:
  470. category = category + ' / ' + '<a href="/w/' + parse.quote(g[0]).replace('/','%2F') + '">' + re.sub("분류:", "", g[0]) + '</a>'
  471. data = re.sub("\[\[(분류:(?:(?:(?!\]\]).)*))\]\]", '', data, 1)
  472. else:
  473. break
  474. data = re.sub("'''(?P<in>.+?)'''(?!')", '<b>\g<in></b>', data)
  475. data = re.sub("''(?P<in>.+?)''(?!')", '<i>\g<in></i>', data)
  476. data = re.sub('~~(?P<in>.+?)~~(?!~)', '<s>\g<in></s>', data)
  477. data = re.sub('--(?P<in>.+?)--(?!-)', '<s>\g<in></s>', data)
  478. data = re.sub('__(?P<in>.+?)__(?!_)', '<u>\g<in></u>', data)
  479. data = re.sub('\^\^(?P<in>.+?)\^\^(?!\^)', '<sup>\g<in></sup>', data)
  480. data = re.sub(',,(?P<in>.+?),,(?!,)', '<sub>\g<in></sub>', data)
  481. data = re.sub('&lt;math&gt;(?P<in>((?!&lt;math&gt;).)*)&lt;\/math&gt;', '$\g<in>$', data)
  482. data = re.sub('{{\|(?P<in>(?:(?:(?:(?!\|}}).)*)(?:\n?))+)\|}}', '<table><tbody><tr><td>\g<in></td></tr></tbody></table>', data)
  483. data = re.sub('\[ruby\((?P<in>[^\|]*)\|(?P<out>[^\)]*)\)\]', '<ruby>\g<in><rp>(</rp><rt>\g<out></rt><rp>)</rp></ruby>', data)
  484. data = re.sub("##\s?(?P<in>[^\n]*)\n", "<div style='display:none;'>\g<in></div>", data);
  485. while True:
  486. m = re.search("\[\[파일:((?:(?!\]\]|\|).)*)(?:\|((?:(?!\]\]).)*))?\]\]", data)
  487. if(m):
  488. c = m.groups()
  489. if(c[1]):
  490. n = re.search("width=([^ \n&]*)", c[1])
  491. e = re.search("height=([^ \n&]*)", c[1])
  492. if(n):
  493. a = n.groups()
  494. width = a[0]
  495. else:
  496. width = ''
  497. if(e):
  498. b = e.groups()
  499. height = b[0]
  500. else:
  501. height = ''
  502. img = re.sub("\.(?P<in>[Jj][Pp][Gg]|[Pp][Nn][Gg]|[Gg][Ii][Ff]|[Jj][Pp][Ee][Gg])", "#\g<in>#", c[0])
  503. data = re.sub("\[\[파일:((?:(?!\]\]|\?).)*)(?:\?((?:(?!\]\]).)*))?\]\]", '<a href="/w/파일:' + img + '"><img src="/image/' + img + '" width="' + width + '" height="' + height + '"></a>', data, 1)
  504. else:
  505. img = re.sub("\.(?P<in>[Jj][Pp][Gg]|[Pp][Nn][Gg]|[Gg][Ii][Ff]|[Jj][Pp][Ee][Gg])", "#\g<in>#", c[0])
  506. data = re.sub("\[\[파일:((?:(?!\]\]|\?).)*)(?:\?((?:(?!\]\]).)*))?\]\]", "<a href='/w/파일:" + img + "'><img src='/image/" + img + "'></a>", data, 1)
  507. if(not re.search("^파일:([^\n]*)", title)):
  508. curs.execute("select * from back where title = '" + pymysql.escape_string(c[0]) + "' and link = '" + pymysql.escape_string(title) + "' and type = 'redirect'")
  509. abb = curs.fetchall()
  510. if(not abb):
  511. curs.execute("insert into back (title, link, type) value ('파일:" + pymysql.escape_string(c[0]) + "', '" + pymysql.escape_string(title) + "', 'file')")
  512. conn.commit()
  513. else:
  514. break
  515. data = re.sub("\[br\]",'<br>', data);
  516. while True:
  517. m = re.search("\[youtube\(((?:(?!,|\)\]).)*)(?:,\s)?(?:width=((?:(?!,|\)\]).)*))?(?:,\s)?(?:height=((?:(?!,|\)\]).)*))?(?:,\s)?(?:width=((?:(?!,|\)\]).)*))?\)\]", data)
  518. if(m):
  519. result = m.groups()
  520. if(result[1]):
  521. if(result[2]):
  522. width = result[1]
  523. height = result[2]
  524. else:
  525. width = result[1]
  526. height = '315'
  527. elif(result[2]):
  528. if(result[3]):
  529. height = result[2]
  530. width = result[3]
  531. else:
  532. height = result[2]
  533. width = '560'
  534. else:
  535. width = '560'
  536. height = '315'
  537. data = re.sub("\[youtube\(((?:(?!,|\)\]).)*)(?:,\s)?(?:width=((?:(?!,|\)\]).)*))?(?:,\s)?(?:height=((?:(?!,|\)\]).)*))?(?:,\s)?(?:width=((?:(?!,|\)\]).)*))?\)\]", '<iframe width="' + width + '" height="' + height + '" src="https://www.youtube.com/embed/' + result[0] + '" frameborder="0" allowfullscreen></iframe>', data, 1)
  538. else:
  539. break
  540. data = re.sub("\[\[(?::(?P<in>(?:분류|파일):(?:(?:(?!\]\]).)*)))\]\]", "[[\g<in>]]", data)
  541. while True:
  542. m = re.search("\[\[(((?!\]\]).)*)\]\]", data)
  543. if(m):
  544. result = m.groups()
  545. a = re.search("((?:(?!\|).)*)\|(.*)", result[0])
  546. if(a):
  547. results = a.groups()
  548. aa = re.search("^(.*)(#(?:.*))$", results[0])
  549. if(aa):
  550. g = results[1]
  551. results = aa.groups()
  552. b = re.search("^http(?:s)?:\/\/", results[0])
  553. if(b):
  554. data = re.sub('\[\[(((?!\]\]).)*)\]\]', '<a class="out_link" href="' + results[0] + results[1] + '">' + g + '</a>', data, 1)
  555. else:
  556. if(results[0] == title):
  557. data = re.sub('\[\[(((?!\]\]).)*)\]\]', '<b>' + g + '</b>', data, 1)
  558. else:
  559. curs.execute("select * from data where title = '" + pymysql.escape_string(results[0]) + "'")
  560. rows = curs.fetchall()
  561. if(rows):
  562. data = re.sub('\[\[(((?!\]\]).)*)\]\]', '<a title="' + results[0] + results[1] + '" href="/w/' + parse.quote(results[0]).replace('/','%2F') + results[1] + '">' + g + '</a>', data, 1)
  563. else:
  564. data = re.sub('\[\[(((?!\]\]).)*)\]\]', '<a title="' + results[0] + results[1] + '" class="not_thing" href="/w/' + parse.quote(results[0]).replace('/','%2F') + results[1] + '">' + g + '</a>', data, 1)
  565. curs.execute("select * from back where title = '" + pymysql.escape_string(results[0]) + "' and link = '" + pymysql.escape_string(title) + "'")
  566. rows = curs.fetchall()
  567. if(not rows):
  568. curs.execute("insert into back (title, link, type) value ('" + pymysql.escape_string(results[0]) + "', '" + pymysql.escape_string(title) + "', '')")
  569. conn.commit()
  570. else:
  571. b = re.search("^http(?:s)?:\/\/", results[0])
  572. if(b):
  573. c = re.search("(?:\.[Jj][Pp][Gg]|\.[Pp][Nn][Gg]|\.[Gg][Ii][Ff]|\.[Jj][Pp][Ee][Gg])", results[0])
  574. if(c):
  575. img = results[0]
  576. img = re.sub("\.(?P<in>[Jj][Pp][Gg]|[Pp][Nn][Gg]|[Gg][Ii][Ff]|[Jj][Pp][Ee][Gg])", "#\g<in>#", img)
  577. data = re.sub('\[\[(((?!\]\]).)*)\]\]', '<a class="out_link" href="' + img + '">' + results[1] + '</a>', data, 1)
  578. else:
  579. data = re.sub('\[\[(((?!\]\]).)*)\]\]', '<a class="out_link" href="' + results[0] + '">' + results[1] + '</a>', data, 1)
  580. else:
  581. if(results[0] == title):
  582. data = re.sub('\[\[(((?!\]\]).)*)\]\]', '<b>' + results[1] + '</b>', data, 1)
  583. else:
  584. curs.execute("select * from data where title = '" + pymysql.escape_string(results[0]) + "'")
  585. rows = curs.fetchall()
  586. if(rows):
  587. data = re.sub('\[\[(((?!\]\]).)*)\]\]', '<a title="' + results[0] + '" href="/w/' + parse.quote(results[0]).replace('/','%2F') + '">' + results[1] + '</a>', data, 1)
  588. else:
  589. data = re.sub('\[\[(((?!\]\]).)*)\]\]', '<a title="' + results[0] + '" class="not_thing" href="/w/' + parse.quote(results[0]).replace('/','%2F') + '">' + results[1] + '</a>', data, 1)
  590. curs.execute("select * from back where title = '" + pymysql.escape_string(results[0]) + "' and link = '" + pymysql.escape_string(title) + "'")
  591. rows = curs.fetchall()
  592. if(not rows):
  593. curs.execute("insert into back (title, link, type) value ('" + pymysql.escape_string(results[0]) + "', '" + pymysql.escape_string(title) + "', '')")
  594. conn.commit()
  595. else:
  596. aa = re.search("^(.*)(#(?:.*))$", result[0])
  597. if(aa):
  598. result = aa.groups()
  599. b = re.search("^http(?:s)?:\/\/", result[0])
  600. if(b):
  601. data = re.sub('\[\[(((?!\]\]).)*)\]\]', '<a class="out_link" href="' + result[0] + result[1] + '">' + result[0] + result[1] + '</a>', data, 1)
  602. else:
  603. if(result[0] == title):
  604. data = re.sub('\[\[(((?!\]\]).)*)\]\]', '<b>' + result[0] + result[1] + '</b>', data, 1)
  605. else:
  606. curs.execute("select * from data where title = '" + pymysql.escape_string(result[0]) + "'")
  607. rows = curs.fetchall()
  608. if(rows):
  609. data = re.sub('\[\[(((?!\]\]).)*)\]\]', '<a href="/w/' + parse.quote(result[0]).replace('/','%2F') + result[1] + '">' + result[0] + result[1] + '</a>', data, 1)
  610. else:
  611. data = re.sub('\[\[(((?!\]\]).)*)\]\]', '<a class="not_thing" href="/w/' + parse.quote(result[0]).replace('/','%2F') + result[1] + '">' + result[0] + result[1] + '</a>', data, 1)
  612. curs.execute("select * from back where title = '" + pymysql.escape_string(result[0]) + "' and link = '" + pymysql.escape_string(title) + "'")
  613. rows = curs.fetchall()
  614. if(not rows):
  615. curs.execute("insert into back (title, link, type) value ('" + pymysql.escape_string(result[0]) + "', '" + pymysql.escape_string(title) + "', '')")
  616. conn.commit()
  617. else:
  618. b = re.search("^http(?:s)?:\/\/", result[0])
  619. if(b):
  620. c = re.search("(?:\.[Jj][Pp][Gg]|\.[Pp][Nn][Gg]|\.[Gg][Ii][Ff]|\.[Jj][Pp][Ee][Gg])", result[0])
  621. if(c):
  622. img = result[0]
  623. img = re.sub("\.(?P<in>[Jj][Pp][Gg]|[Pp][Nn][Gg]|[Gg][Ii][Ff]|[Jj][Pp][Ee][Gg])", "#\g<in>#", img)
  624. data = re.sub('\[\[(((?!\]\]).)*)\]\]', '<a class="out_link" href="' + img + '">' + img + '</a>', data, 1)
  625. else:
  626. data = re.sub('\[\[(((?!\]\]).)*)\]\]', '<a class="out_link" href="' + result[0] + '">' + result[0] + '</a>', data, 1)
  627. else:
  628. if(result[0] == title):
  629. data = re.sub('\[\[(((?!\]\]).)*)\]\]', '<b>' + result[0] + '</b>', data, 1)
  630. else:
  631. curs.execute("select * from data where title = '" + pymysql.escape_string(result[0]) + "'")
  632. rows = curs.fetchall()
  633. if(rows):
  634. data = re.sub('\[\[(((?!\]\]).)*)\]\]', '<a href="/w/' + parse.quote(result[0]).replace('/','%2F') + '">' + result[0] + '</a>', data, 1)
  635. else:
  636. data = re.sub('\[\[(((?!\]\]).)*)\]\]', '<a class="not_thing" href="/w/' + parse.quote(result[0]).replace('/','%2F') + '">' + result[0] + '</a>', data, 1)
  637. curs.execute("select * from back where title = '" + pymysql.escape_string(result[0]) + "' and link = '" + pymysql.escape_string(title) + "'")
  638. rows = curs.fetchall()
  639. if(not rows):
  640. curs.execute("insert into back (title, link, type) value ('" + pymysql.escape_string(result[0]) + "', '" + pymysql.escape_string(title) + "', '')")
  641. conn.commit()
  642. else:
  643. break
  644. while True:
  645. m = re.search("(http(?:s)?:\/\/(?:(?:(?:(?!\.[Jj][Pp][Gg]|\.[Pp][Nn][Gg]|\.[Gg][Ii][Ff]|\.[Jj][Pp][Ee][Gg]|#[Jj][Pp][Gg]#|#[Pp][Nn][Gg]#|#[Gg][Ii][Ff]#|#[Jj][Pp][Ee][Gg]#).)*)(?:\.[Jj][Pp][Gg]|\.[Pp][Nn][Gg]|\.[Gg][Ii][Ff]|\.[Jj][Pp][Ee][Gg])))(?:(?:(?:\?)width=((?:[0-9]*)(?:px|%)?))?(?:(?:\?|&)height=((?:[0-9]*)(?:px|%)?))?(?:(?:&)width=((?:[0-9]*)(?:px|%)?))?)?", data)
  646. if(m):
  647. result = m.groups()
  648. if(result[1]):
  649. if(result[2]):
  650. width = result[1]
  651. height = result[2]
  652. else:
  653. width = result[1]
  654. height = ''
  655. elif(result[2]):
  656. if(result[3]):
  657. height = result[2]
  658. width = result[3]
  659. else:
  660. height = result[2]
  661. width = ''
  662. else:
  663. width = ''
  664. height = ''
  665. c = result[0]
  666. c = re.sub("\.(?P<in>[Jj][Pp][Gg]|[Pp][Nn][Gg]|[Gg][Ii][Ff]|[Jj][Pp][Ee][Gg])", "#\g<in>#", c)
  667. data = re.sub("(http(?:s)?:\/\/(?:(?:(?:(?!\.[Jj][Pp][Gg]|\.[Pp][Nn][Gg]|\.[Gg][Ii][Ff]|\.[Jj][Pp][Ee][Gg]|#[Jj][Pp][Gg]#|#[Pp][Nn][Gg]#|#[Gg][Ii][Ff]#|#[Jj][Pp][Ee][Gg]#).)*)(?:\.[Jj][Pp][Gg]|\.[Pp][Nn][Gg]|\.[Gg][Ii][Ff]|\.[Jj][Pp][Ee][Gg])))(?:(?:(?:\?)width=((?:[0-9]*)(?:px)?))?(?:(?:\?|&)height=((?:[0-9]*)(?:px)?))?(?:(?:&)width=((?:[0-9]*)(?:px)?))?)?", "<img width='" + width + "' height='" + height + "' src='" + c + "'>", data, 1)
  668. else:
  669. break
  670. while True:
  671. m = re.search("((?:(?:\s\*\s[^\n]*)\n?)+)", data)
  672. if(m):
  673. result = m.groups()
  674. end = str(result[0])
  675. end = re.sub("\s\*\s(?P<in>[^\n]*)", "<li>\g<in></li>", end)
  676. end = re.sub("\n", '', end)
  677. data = re.sub("((?:(?:\s\*\s[^\n]*)\n?)+)", '<ul id="list">' + end + '</ul>', data, 1)
  678. else:
  679. break
  680. data = re.sub('\[date\]', getnow(), data)
  681. data = re.sub("#(?P<in>[Jj][Pp][Gg]|[Pp][Nn][Gg]|[Gg][Ii][Ff]|[Jj][Pp][Ee][Gg])#", ".\g<in>", data)
  682. data = re.sub("-{4,11}", "<hr>", data)
  683. while True:
  684. b = re.search("\r\n( +)", data)
  685. if(b):
  686. result = b.groups()
  687. tp = len(result[0])
  688. up = ''
  689. i = 0
  690. while True:
  691. up = up + '<span id="in"></span>'
  692. i = i + 1
  693. if(i == tp):
  694. break
  695. data = re.sub("\r\n( +)", '<br>' + up, data, 1)
  696. else:
  697. break
  698. a = 1
  699. tou = "<hr id='footnote'><div class='wiki-macro-footnote'><br>"
  700. while True:
  701. b = re.search("\[\*([^\s]*)\s(((?!\]).)*)\]", data)
  702. if(b):
  703. results = b.groups()
  704. if(results[0]):
  705. c = results[1]
  706. c = re.sub("<(?:[^>]*)>", '', c)
  707. tou = tou + "<span class='footnote-list'><a href=\"#rfn-" + str(a) + "\" id=\"fn-" + str(a) + "\">[" + results[0] + "]</a> " + results[1] + "</span><br>"
  708. data = re.sub("\[\*([^\s]*)\s(((?!\]).)*)\]", "<sup><a class=\"footnotes\" title=\"" + c + "\" id=\"rfn-" + str(a) + "\" href=\"#fn-" + str(a) + "\">[" + results[0] + "]</a></sup>", data, 1)
  709. else:
  710. c = results[1]
  711. c = re.sub("<(?:[^>]*)>", '', c)
  712. tou = tou + "<span class='footnote-list'><a href=\"#rfn-" + str(a) + "\" id=\"fn-" + str(a) + "\">[" + str(a) + "]</a> " + results[1] + "</span><br>"
  713. data = re.sub("\[\*([^\s]*)\s(((?!\]).)*)\]", '<sup><a class="footnotes" title="' + c + '" id="rfn-' + str(a) + '" href="#fn-' + str(a) + '">[' + str(a) + ']</a></sup>', data, 1)
  714. a = a + 1
  715. else:
  716. tou = tou + '</div>'
  717. if(tou == "<hr id='footnote'><div class='wiki-macro-footnote'><br></div>"):
  718. tou = ""
  719. break
  720. data = re.sub("\[각주\](?:(?:<br>| |\r|\n)+)?$", "", data)
  721. data = re.sub("\[각주\]", "<br>" + tou, data)
  722. data = data + tou
  723. if(category):
  724. data = data + '<div style="width:100%;border: 1px solid #777;padding: 5px;margin-top: 1em;">분류: ' + category + '</div>'
  725. while True:
  726. m = re.search("(\|\|(?:(?:(?:.*)\n?)\|\|)+)", data)
  727. if(m):
  728. results = m.groups()
  729. table = results[0]
  730. while True:
  731. a = re.search("^(\|\|(?:(?:\|\|)+)?)((?:&lt;(?:(?:(?!&gt;).)*)&gt;)+)?", table)
  732. if(a):
  733. row = ''
  734. cel = ''
  735. celstyle = ''
  736. rowstyle = ''
  737. alltable = ''
  738. result = a.groups()
  739. if(result[1]):
  740. q = re.search("&lt;table\s?width=((?:(?!&gt;).)*)&gt;", result[1])
  741. w = re.search("&lt;table\s?height=((?:(?!&gt;).)*)&gt;", result[1])
  742. e = re.search("&lt;table\s?align=((?:(?!&gt;).)*)&gt;", result[1])
  743. alltable = 'style="'
  744. celstyle = 'style="'
  745. rowstyle = 'style="'
  746. if(q):
  747. resultss = q.groups()
  748. alltable = alltable + 'width:' + resultss[0] + ';'
  749. if(w):
  750. resultss = w.groups()
  751. alltable = alltable + 'height:' + resultss[0] + ';'
  752. if(e):
  753. resultss = e.groups()
  754. if(resultss[0] == 'right'):
  755. alltable = alltable + 'margin-left:auto;'
  756. elif(resultss[0] == 'center'):
  757. alltable = alltable + 'margin:auto;'
  758. else:
  759. alltable = alltable + 'margin-right:auto;'
  760. ee = re.search("&lt;table\s?textalign=((?:(?!&gt;).)*)&gt;", result[1])
  761. if(ee):
  762. resultss = ee.groups()
  763. if(resultss[0] == 'right'):
  764. alltable = alltable + 'text-align:right;'
  765. elif(resultss[0] == 'center'):
  766. alltable = alltable + 'text-align:center;'
  767. else:
  768. alltable = alltable + 'text-align:left;'
  769. r = re.search("&lt;-((?:(?!&gt;).)*)&gt;", result[1])
  770. if(r):
  771. resultss = r.groups()
  772. cel = 'colspan="' + resultss[0] + '"'
  773. else:
  774. cel = 'colspan="' + str(round(len(result[0]) / 2)) + '"'
  775. t = re.search("&lt;\|((?:(?!&gt;).)*)&gt;", result[1])
  776. if(t):
  777. resultss = t.groups()
  778. row = 'rowspan="' + resultss[0] + '"'
  779. ba = re.search("&lt;rowbgcolor=(#[0-9a-f-A-F]{6})&gt;", result[1])
  780. bb = re.search("&lt;rowbgcolor=(#[0-9a-f-A-F]{3})&gt;", result[1])
  781. bc = re.search("&lt;rowbgcolor=(\w+)&gt;", result[1])
  782. if(ba):
  783. resultss = ba.groups()
  784. rowstyle = rowstyle + 'background:' + resultss[0] + ';'
  785. elif(bb):
  786. resultss = bb.groups()
  787. rowstyle = rowstyle + 'background:' + resultss[0] + ';'
  788. elif(bc):
  789. resultss = bc.groups()
  790. rowstyle = rowstyle + 'background:' + resultss[0] + ';'
  791. z = re.search("&lt;table\s?bordercolor=(#[0-9a-f-A-F]{6})&gt;", result[1])
  792. x = re.search("&lt;table\s?bordercolor=(#[0-9a-f-A-F]{3})&gt;", result[1])
  793. c = re.search("&lt;table\s?bordercolor=(\w+)&gt;", result[1])
  794. if(z):
  795. resultss = z.groups()
  796. alltable = alltable + 'border:' + resultss[0] + ' 2px solid;'
  797. elif(x):
  798. resultss = x.groups()
  799. alltable = alltable + 'border:' + resultss[0] + ' 2px solid;'
  800. elif(c):
  801. resultss = c.groups()
  802. alltable = alltable + 'border:' + resultss[0] + ' 2px solid;'
  803. aq = re.search("&lt;table\s?bgcolor=(#[0-9a-f-A-F]{6})&gt;", result[1])
  804. aw = re.search("&lt;table\s?bgcolor=(#[0-9a-f-A-F]{3})&gt;", result[1])
  805. ae = re.search("&lt;table\s?bgcolor=(\w+)&gt;", result[1])
  806. if(aq):
  807. resultss = aq.groups()
  808. alltable = alltable + 'background:' + resultss[0] + ';'
  809. elif(aw):
  810. resultss = aw.groups()
  811. alltable = alltable + 'background:' + resultss[0] + ';'
  812. elif(ae):
  813. resultss = ae.groups()
  814. alltable = alltable + 'background:' + resultss[0] + ';'
  815. j = re.search("&lt;bgcolor=(#[0-9a-f-A-F]{6})&gt;", result[1])
  816. k = re.search("&lt;bgcolor=(#[0-9a-f-A-F]{3})&gt;", result[1])
  817. l = re.search("&lt;bgcolor=(\w+)&gt;", result[1])
  818. if(j):
  819. resultss = j.groups()
  820. celstyle = celstyle + 'background:' + resultss[0] + ';'
  821. elif(k):
  822. resultss = k.groups()
  823. celstyle = celstyle + 'background:' + resultss[0] + ';'
  824. elif(l):
  825. resultss = l.groups()
  826. celstyle = celstyle + 'background:' + resultss[0] + ';'
  827. aa = re.search("&lt;(#[0-9a-f-A-F]{6})&gt;", result[1])
  828. ab = re.search("&lt;(#[0-9a-f-A-F]{3})&gt;", result[1])
  829. ac = re.search("&lt;(\w+)&gt;", result[1])
  830. if(aa):
  831. resultss = aa.groups()
  832. celstyle = celstyle + 'background:' + resultss[0] + ';'
  833. elif(ab):
  834. resultss = ab.groups()
  835. celstyle = celstyle + 'background:' + resultss[0] + ';'
  836. elif(ac):
  837. resultss = ac.groups()
  838. celstyle = celstyle + 'background:' + resultss[0] + ';'
  839. qa = re.search("&lt;width=((?:(?!&gt;).)*)&gt;", result[1])
  840. qb = re.search("&lt;height=((?:(?!&gt;).)*)&gt;", result[1])
  841. if(qa):
  842. resultss = qa.groups()
  843. celstyle = celstyle + 'width:' + resultss[0] + ';'
  844. if(qb):
  845. resultss = qb.groups()
  846. celstyle = celstyle + 'height:' + resultss[0] + ';'
  847. i = re.search("&lt;\)&gt;", result[1])
  848. o = re.search("&lt;:&gt;", result[1])
  849. p = re.search("&lt;\(&gt;", result[1])
  850. if(i):
  851. celstyle = celstyle + 'text-align:right;'
  852. elif(o):
  853. celstyle = celstyle + 'text-align:center;'
  854. elif(p):
  855. celstyle = celstyle + 'text-align:left;'
  856. alltable = alltable + '"'
  857. celstyle = celstyle + '"'
  858. rowstyle = rowstyle + '"'
  859. table = re.sub("^(\|\|(?:(?:\|\|)+)?)((?:&lt;(?:(?:(?!&gt;).)*)&gt;)+)?", "<table " + alltable + "><tbody><tr " + rowstyle + "><td " + cel + " " + row + " " + celstyle + ">", table, 1)
  860. else:
  861. cel = 'colspan="' + str(round(len(result[0]) / 2)) + '"'
  862. table = re.sub("^(\|\|(?:(?:\|\|)+)?)((?:&lt;(?:(?:(?!&gt;).)*)&gt;)+)?", "<table><tbody><tr><td " + cel + ">", table, 1)
  863. else:
  864. break
  865. table = re.sub("\|\|$", "</td></tr></tbody></table>", table)
  866. while True:
  867. b = re.search("\|\|\r\n(\|\|(?:(?:\|\|)+)?)((?:&lt;(?:(?:(?!&gt;).)*)&gt;)+)?", table)
  868. if(b):
  869. row = ''
  870. cel = ''
  871. celstyle = ''
  872. rowstyle = ''
  873. result = b.groups()
  874. if(result[1]):
  875. celstyle = 'style="'
  876. rowstyle = 'style="'
  877. r = re.search("&lt;-((?:(?!&gt;).)*)&gt;", result[1])
  878. if(r):
  879. resultss = r.groups()
  880. cel = 'colspan="' + resultss[0] + '"'
  881. else:
  882. cel = 'colspan="' + str(round(len(result[0]) / 2)) + '"'
  883. t = re.search("&lt;\|((?:(?!&gt;).)*)&gt;", result[1])
  884. if(t):
  885. resultss = t.groups()
  886. row = 'rowspan="' + resultss[0] + '"'
  887. ba = re.search("&lt;rowbgcolor=(#[0-9a-f-A-F]{6})&gt;", result[1])
  888. bb = re.search("&lt;rowbgcolor=(#[0-9a-f-A-F]{3})&gt;", result[1])
  889. bc = re.search("&lt;rowbgcolor=(\w+)&gt;", result[1])
  890. if(ba):
  891. resultss = ba.groups()
  892. rowstyle = rowstyle + 'background:' + resultss[0] + ';'
  893. elif(bb):
  894. resultss = bb.groups()
  895. rowstyle = rowstyle + 'background:' + resultss[0] + ';'
  896. elif(bc):
  897. resultss = bc.groups()
  898. rowstyle = rowstyle + 'background:' + resultss[0] + ';'
  899. j = re.search("&lt;bgcolor=(#[0-9a-f-A-F]{6})&gt;", result[1])
  900. k = re.search("&lt;bgcolor=(#[0-9a-f-A-F]{3})&gt;", result[1])
  901. l = re.search("&lt;bgcolor=(\w+)&gt;", result[1])
  902. if(j):
  903. resultss = j.groups()
  904. celstyle = celstyle + 'background:' + resultss[0] + ';'
  905. elif(k):
  906. resultss = k.groups()
  907. celstyle = celstyle + 'background:' + resultss[0] + ';'
  908. elif(l):
  909. resultss = l.groups()
  910. celstyle = celstyle + 'background:' + resultss[0] + ';'
  911. aa = re.search("&lt;(#[0-9a-f-A-F]{6})&gt;", result[1])
  912. ab = re.search("&lt;(#[0-9a-f-A-F]{3})&gt;", result[1])
  913. ac = re.search("&lt;(\w+)&gt;", result[1])
  914. if(aa):
  915. resultss = aa.groups()
  916. celstyle = celstyle + 'background:' + resultss[0] + ';'
  917. elif(ab):
  918. resultss = ab.groups()
  919. celstyle = celstyle + 'background:' + resultss[0] + ';'
  920. elif(ac):
  921. resultss = ac.groups()
  922. celstyle = celstyle + 'background:' + resultss[0] + ';'
  923. qa = re.search("&lt;width=((?:(?!&gt;).)*)&gt;", result[1])
  924. qb = re.search("&lt;height=((?:(?!&gt;).)*)&gt;", result[1])
  925. if(qa):
  926. resultss = qa.groups()
  927. celstyle = celstyle + 'width:' + resultss[0] + ';'
  928. if(qb):
  929. resultss = qb.groups()
  930. celstyle = celstyle + 'height:' + resultss[0] + ';'
  931. i = re.search("&lt;\)&gt;", result[1])
  932. o = re.search("&lt;:&gt;", result[1])
  933. p = re.search("&lt;\(&gt;", result[1])
  934. if(i):
  935. celstyle = celstyle + 'text-align:right;'
  936. elif(o):
  937. celstyle = celstyle + 'text-align:center;'
  938. elif(p):
  939. celstyle = celstyle + 'text-align:left;'
  940. celstyle = celstyle + '"'
  941. rowstyle = rowstyle + '"'
  942. table = re.sub("\|\|\r\n(\|\|(?:(?:\|\|)+)?)((?:&lt;(?:(?:(?!&gt;).)*)&gt;)+)?", "</td></tr><tr " + rowstyle + "><td " + cel + " " + row + " " + celstyle + ">", table, 1)
  943. else:
  944. cel = 'colspan="' + str(round(len(result[0]) / 2)) + '"'
  945. table = re.sub("\|\|\r\n(\|\|(?:(?:\|\|)+)?)((?:&lt;(?:(?:(?!&gt;).)*)&gt;)+)?", "</td></tr><tr><td " + cel + ">", table, 1)
  946. else:
  947. break
  948. while True:
  949. c = re.search("(\|\|(?:(?:\|\|)+)?)((?:&lt;(?:(?:(?!&gt;).)*)&gt;)+)?", table)
  950. if(c):
  951. row = ''
  952. cel = ''
  953. celstyle = ''
  954. result = c.groups()
  955. if(result[1]):
  956. celstyle = 'style="'
  957. r = re.search("&lt;-((?:(?!&gt;).)*)&gt;", result[1])
  958. if(r):
  959. resultss = r.groups()
  960. cel = 'colspan="' + resultss[0] + '"';
  961. else:
  962. cel = 'colspan="' + str(round(len(result[0]) / 2)) + '"'
  963. t = re.search("&lt;\|((?:(?!&gt;).)*)&gt;", result[1])
  964. if(t):
  965. resultss = t.groups()
  966. row = 'rowspan="' + resultss[0] + '"';
  967. j = re.search("&lt;bgcolor=(#[0-9a-f-A-F]{6})&gt;", result[1])
  968. k = re.search("&lt;bgcolor=(#[0-9a-f-A-F]{3})&gt;", result[1])
  969. l = re.search("&lt;bgcolor=(\w+)&gt;", result[1])
  970. if(j):
  971. resultss = j.groups()
  972. celstyle = celstyle + 'background:' + resultss[0] + ';'
  973. elif(k):
  974. resultss = k.groups()
  975. celstyle = celstyle + 'background:' + resultss[0] + ';'
  976. elif(l):
  977. resultss = l.groups()
  978. celstyle = celstyle + 'background:' + resultss[0] + ';'
  979. aa = re.search("&lt;(#[0-9a-f-A-F]{6})&gt;", result[1])
  980. ab = re.search("&lt;(#[0-9a-f-A-F]{3})&gt;", result[1])
  981. ac = re.search("&lt;(\w+)&gt;", result[1])
  982. if(aa):
  983. resultss = aa.groups()
  984. celstyle = celstyle + 'background:' + resultss[0] + ';'
  985. elif(ab):
  986. resultss = ab.groups()
  987. celstyle = celstyle + 'background:' + resultss[0] + ';'
  988. elif(ac):
  989. resultss = ac.groups()
  990. celstyle = celstyle + 'background:' + resultss[0] + ';'
  991. qa = re.search("&lt;width=((?:(?!&gt;).)*)&gt;", result[1])
  992. qb = re.search("&lt;height=((?:(?!&gt;).)*)&gt;", result[1])
  993. if(qa):
  994. resultss = qa.groups()
  995. celstyle = celstyle + 'width:' + resultss[0] + ';'
  996. if(qb):
  997. resultss = qb.groups()
  998. celstyle = celstyle + 'height:' + resultss[0] + ';'
  999. i = re.search("&lt;\)&gt;", result[1])
  1000. o = re.search("&lt;:&gt;", result[1])
  1001. p = re.search("&lt;\(&gt;", result[1])
  1002. if(i):
  1003. celstyle = celstyle + 'text-align:right;'
  1004. elif(o):
  1005. celstyle = celstyle + 'text-align:center;'
  1006. elif(p):
  1007. celstyle = celstyle + 'text-align:left;'
  1008. celstyle = celstyle + '"'
  1009. table = re.sub("(\|\|(?:(?:\|\|)+)?)((?:&lt;(?:(?:(?!&gt;).)*)&gt;)+)?", "</td><td " + cel + " " + row + " " + celstyle + ">", table, 1)
  1010. else:
  1011. cel = 'colspan="' + str(round(len(result[0]) / 2)) + '"'
  1012. table = re.sub("(\|\|(?:(?:\|\|)+)?)((?:&lt;(?:(?:(?!&gt;).)*)&gt;)+)?", "</td><td " + cel + ">", table, 1)
  1013. else:
  1014. break
  1015. data = re.sub("(\|\|(?:(?:(?:.*)\n?)\|\|)+)", table, data, 1)
  1016. else:
  1017. break
  1018. data = re.sub('<\/blockquote>((\r)?\n){2}<blockquote>', '</blockquote><br><blockquote>', data)
  1019. data = re.sub('\n', '<br>', data)
  1020. data = re.sub('^<br>', '', data)
  1021. return str(data)
  1022. def getip(request):
  1023. if(session.get('Now') == True):
  1024. ip = format(session['DREAMER'])
  1025. else:
  1026. if(request.headers.getlist("X-Forwarded-For")):
  1027. ip = request.headers.getlist("X-Forwarded-For")[0]
  1028. else:
  1029. ip = request.remote_addr
  1030. return ip
  1031. def getcan(ip, name):
  1032. m = re.search("^사용자:(.*)", name)
  1033. n = re.search("^파일:(.*)", name)
  1034. if(m):
  1035. g = m.groups()
  1036. if(ip == g[0]):
  1037. if(re.search("\.", g[0])):
  1038. return 1
  1039. else:
  1040. curs.execute("select * from ban where block = '" + pymysql.escape_string(ip) + "'")
  1041. rows = curs.fetchall()
  1042. if(rows):
  1043. return 1
  1044. else:
  1045. return 0
  1046. else:
  1047. return 1
  1048. elif(n):
  1049. return 1
  1050. else:
  1051. b = re.search("^([0-9](?:[0-9]?[0-9]?)\.[0-9](?:[0-9]?[0-9]?))", ip)
  1052. if(b):
  1053. results = b.groups()
  1054. curs.execute("select * from ban where block = '" + pymysql.escape_string(results[0]) + "' and band = 'O'")
  1055. rowss = curs.fetchall()
  1056. if(rowss):
  1057. return 1
  1058. else:
  1059. curs.execute("select * from ban where block = '" + pymysql.escape_string(ip) + "'")
  1060. rows = curs.fetchall()
  1061. if(rows):
  1062. return 1
  1063. else:
  1064. curs.execute("select * from data where title = '" + pymysql.escape_string(name) + "'")
  1065. row = curs.fetchall()
  1066. if(row):
  1067. curs.execute("select * from user where id = '" + pymysql.escape_string(ip) + "'")
  1068. rows = curs.fetchall()
  1069. if(row[0]['acl'] == 'user'):
  1070. if(rows):
  1071. return 0
  1072. else:
  1073. return 1
  1074. elif(row[0]['acl'] == 'admin'):
  1075. if(rows):
  1076. if(rows[0]['acl'] == 'admin' or rows[0]['acl'] == 'owner'):
  1077. return 0
  1078. else:
  1079. return 1
  1080. else:
  1081. return 1
  1082. else:
  1083. return 0
  1084. else:
  1085. return 0
  1086. else:
  1087. curs.execute("select * from ban where block = '" + pymysql.escape_string(ip) + "'")
  1088. rows = curs.fetchall()
  1089. if(rows):
  1090. return 1
  1091. else:
  1092. curs.execute("select * from data where title = '" + pymysql.escape_string(name) + "'")
  1093. row = curs.fetchall()
  1094. if(row):
  1095. curs.execute("select * from user where id = '" + pymysql.escape_string(ip) + "'")
  1096. rows = curs.fetchall()
  1097. if(row[0]['acl'] == 'user'):
  1098. if(rows):
  1099. return 0
  1100. else:
  1101. return 1
  1102. elif(row[0]['acl'] == 'admin'):
  1103. if(rows):
  1104. if(rows[0]['acl'] == 'admin' or rows[0]['acl'] == 'owner'):
  1105. return 0
  1106. else:
  1107. return 1
  1108. else:
  1109. return 1
  1110. else:
  1111. return 0
  1112. else:
  1113. return 0
  1114. def getban(ip):
  1115. b = re.search("^([0-9](?:[0-9]?[0-9]?)\.[0-9](?:[0-9]?[0-9]?))", ip)
  1116. if(b):
  1117. results = b.groups()
  1118. curs.execute("select * from ban where block = '" + pymysql.escape_string(results[0]) + "' and band = 'O'")
  1119. rowss = curs.fetchall()
  1120. if(rowss):
  1121. return 1
  1122. else:
  1123. curs.execute("select * from ban where block = '" + pymysql.escape_string(ip) + "'")
  1124. rows = curs.fetchall()
  1125. if(rows):
  1126. return 1
  1127. else:
  1128. return 0
  1129. else:
  1130. curs.execute("select * from ban where block = '" + pymysql.escape_string(ip) + "'")
  1131. rows = curs.fetchall()
  1132. if(rows):
  1133. return 1
  1134. else:
  1135. return 0
  1136. def getdiscuss(ip, name, sub):
  1137. b = re.search("^([0-9](?:[0-9]?[0-9]?)\.[0-9](?:[0-9]?[0-9]?))", ip)
  1138. if(b):
  1139. results = b.groups()
  1140. curs.execute("select * from ban where block = '" + pymysql.escape_string(results[0]) + "' and band = 'O'")
  1141. rowss = curs.fetchall()
  1142. if(rowss):
  1143. return 1
  1144. else:
  1145. curs.execute("select * from ban where block = '" + pymysql.escape_string(ip) + "'")
  1146. rows = curs.fetchall()
  1147. if(rows):
  1148. return 1
  1149. else:
  1150. curs.execute("select * from stop where title = '" + pymysql.escape_string(name) + "' and sub = '" + pymysql.escape_string(sub) + "'")
  1151. rows = curs.fetchall()
  1152. if(rows):
  1153. return 1
  1154. else:
  1155. return 0
  1156. else:
  1157. curs.execute("select * from ban where block = '" + pymysql.escape_string(ip) + "'")
  1158. rows = curs.fetchall()
  1159. if(rows):
  1160. return 1
  1161. else:
  1162. curs.execute("select * from stop where title = '" + pymysql.escape_string(name) + "' and sub = '" + pymysql.escape_string(sub) + "'")
  1163. rows = curs.fetchall()
  1164. if(rows):
  1165. return 1
  1166. else:
  1167. return 0
  1168. def getnow():
  1169. now = time.localtime()
  1170. s = "%04d-%02d-%02d %02d:%02d:%02d" % (now.tm_year, now.tm_mon, now.tm_mday, now.tm_hour, now.tm_min, now.tm_sec)
  1171. return s
  1172. def discuss(title, sub, date):
  1173. curs.execute("select * from rd where title = '" + pymysql.escape_string(title) + "' and sub = '" + pymysql.escape_string(sub) + "'")
  1174. rows = curs.fetchall()
  1175. if(rows):
  1176. curs.execute("update rd set date = '" + pymysql.escape_string(date) + "' where title = '" + pymysql.escape_string(title) + "' and sub = '" + pymysql.escape_string(sub) + "'")
  1177. else:
  1178. curs.execute("insert into rd (title, sub, date) value ('" + pymysql.escape_string(title) + "', '" + pymysql.escape_string(sub) + "', '" + pymysql.escape_string(date) + "')")
  1179. conn.commit()
  1180. def block(block, end, today, blocker, why):
  1181. curs.execute("insert into rb (block, end, today, blocker, why) value ('" + pymysql.escape_string(block) + "', '" + pymysql.escape_string(end) + "', '" + today + "', '" + pymysql.escape_string(blocker) + "', '" + pymysql.escape_string(why) + "')")
  1182. conn.commit()
  1183. def history(title, data, date, ip, send, leng):
  1184. curs.execute("select * from history where title = '" + pymysql.escape_string(title) + "' order by id+0 desc limit 1")
  1185. rows = curs.fetchall()
  1186. if(rows):
  1187. number = int(rows[0]['id']) + 1
  1188. curs.execute("insert into history (id, title, data, date, ip, send, leng) value ('" + str(number) + "', '" + pymysql.escape_string(title) + "', '" + pymysql.escape_string(data) + "', '" + date + "', '" + pymysql.escape_string(ip) + "', '" + pymysql.escape_string(send) + "', '" + leng + "')")
  1189. conn.commit()
  1190. else:
  1191. curs.execute("insert into history (id, title, data, date, ip, send, leng) value ('1', '" + pymysql.escape_string(title) + "', '" + pymysql.escape_string(data) + "', '" + date + "', '" + pymysql.escape_string(ip) + "', '" + pymysql.escape_string(send + ' (새 문서)') + "', '" + leng + "')")
  1192. conn.commit()
  1193. def getleng(existing, change):
  1194. if(existing < change):
  1195. leng = change - existing
  1196. leng = '+' + str(leng)
  1197. elif(change < existing):
  1198. leng = existing - change
  1199. leng = '-' + str(leng)
  1200. else:
  1201. leng = '0'
  1202. return leng
  1203. @app.route('/upload', methods=['GET', 'POST'])
  1204. def upload():
  1205. if(request.method == 'POST'):
  1206. ip = getip(request)
  1207. ban = getban(ip)
  1208. if(ban == 1):
  1209. return '<meta http-equiv="refresh" content="0;url=/ban" />'
  1210. else:
  1211. file = request.files['file']
  1212. if(file):
  1213. if(re.search('^([^./\\*<>|:?"]+)\.([Jj][Pp][Gg]|[Gg][Ii][Ff]|[Jj][Pp][Ee][Gg]|[Pp][Nn][Gg])$', file.filename)):
  1214. filename = file.filename
  1215. if(os.path.exists(os.path.join('image', filename))):
  1216. return '<meta http-equiv="refresh" content="0;url=/error/16" />'
  1217. else:
  1218. file.save(os.path.join('image', filename))
  1219. curs.execute("insert into data (title, data, acl) value ('" + pymysql.escape_string('파일:' + filename) + "', '" + pymysql.escape_string('[[파일:' + filename + ']][br][br]{{{[[파일:' + filename + ']]}}}') + "', '')")
  1220. conn.commit()
  1221. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote('파일:' + filename).replace('/','%2F') + '" />'
  1222. else:
  1223. return '<meta http-equiv="refresh" content="0;url=/error/15" />'
  1224. else:
  1225. return '<meta http-equiv="refresh" content="0;url=/error/14" />'
  1226. else:
  1227. ip = getip(request)
  1228. ban = getban(ip)
  1229. if(ban == 1):
  1230. return '<meta http-equiv="refresh" content="0;url=/ban" />'
  1231. else:
  1232. return render_template('index.html', logo = data['name'], title = '업로드', tn = 21, number = data['upload'])
  1233. @app.route('/image/<path:name>')
  1234. def image(name = None):
  1235. if(os.path.exists(os.path.join('image', name))):
  1236. return send_file(os.path.join('image', name), mimetype='image')
  1237. else:
  1238. return render_template('index.html', logo = data['name'], data = '이미지 없음.', title = '이미지 보기'), 404
  1239. @app.route('/recentchanges')
  1240. def recentchanges():
  1241. i = 0
  1242. div = '<div>'
  1243. curs.execute("select * from history order by date desc limit 50")
  1244. rows = curs.fetchall()
  1245. if(rows):
  1246. admin = admincheck()
  1247. while True:
  1248. try:
  1249. a = rows[i]
  1250. except:
  1251. div = div + '</div>'
  1252. break
  1253. if(rows[i]['send']):
  1254. send = rows[i]['send']
  1255. send = re.sub('<a href="\/w\/(?P<in>[^"]*)">(?P<out>[^&]*)<\/a>', '<a href="/w/\g<in>">\g<out></a>', send)
  1256. else:
  1257. send = '<br>'
  1258. title = rows[i]['title']
  1259. title = re.sub('<', '&lt;', title)
  1260. title = re.sub('>', '&gt;', title)
  1261. m = re.search("\+", rows[i]['leng'])
  1262. n = re.search("\-", rows[i]['leng'])
  1263. if(m):
  1264. leng = '<span style="color:green;">' + rows[i]['leng'] + '</span>'
  1265. elif(n):
  1266. leng = '<span style="color:red;">' + rows[i]['leng'] + '</span>'
  1267. else:
  1268. leng = '<span style="color:gray;">' + rows[i]['leng'] + '</span>'
  1269. if(admin == 1):
  1270. curs.execute("select * from ban where block = '" + pymysql.escape_string(rows[i]['ip']) + "'")
  1271. row = curs.fetchall()
  1272. if(row):
  1273. ban = ' <a href="/ban/' + parse.quote(rows[i]['ip']).replace('/','%2F') + '">(해제)</a>'
  1274. else:
  1275. ban = ' <a href="/ban/' + parse.quote(rows[i]['ip']).replace('/','%2F') + '">(차단)</a>'
  1276. else:
  1277. ban = ''
  1278. if(re.search('\.', rows[i]['ip'])):
  1279. ip = rows[i]['ip']
  1280. else:
  1281. curs.execute("select * from data where title = '사용자:" + pymysql.escape_string(rows[i]['ip']) + "'")
  1282. row = curs.fetchall()
  1283. if(row):
  1284. ip = '<a href="/w/' + parse.quote('사용자:' + rows[i]['ip']).replace('/','%2F') + '">' + rows[i]['ip'] + '</a>'
  1285. else:
  1286. ip = '<a class="not_thing" href="/w/' + parse.quote('사용자:' + rows[i]['ip']).replace('/','%2F') + '">' + rows[i]['ip'] + '</a>'
  1287. if((int(rows[i]['id']) - 1) == 0):
  1288. revert = ''
  1289. else:
  1290. revert = '<a href="/revert/' + parse.quote(rows[i]['title']).replace('/','%2F') + '/r/' + str(int(rows[i]['id']) - 1) + '">(되돌리기)</a>'
  1291. div = div + '<table style="width: 100%;"><tbody><tr><td style="text-align: center;width:33.33%;"><a href="/w/' + parse.quote(rows[i]['title']).replace('/','%2F') + '">' + title + '</a> <a href="/history/' + parse.quote(rows[i]['title']).replace('/','%2F') + '/n/1">(역사)</a> ' + revert + ' (' + leng + ')</td><td style="text-align: center;width:33.33%;">' + ip + ban + '</td><td style="text-align: center;width:33.33%;">' + rows[i]['date'] + '</td></tr><tr><td colspan="3" style="text-align: center;width:100%;">' + send + '</td></tr></tbody></table>'
  1292. i = i + 1
  1293. return render_template('index.html', logo = data['name'], rows = div, tn = 3, title = '최근 변경내역')
  1294. else:
  1295. return render_template('index.html', logo = data['name'], rows = '', tn = 3, title = '최근 변경내역')
  1296. @app.route('/record/<path:name>/n/<int:number>')
  1297. def record(name = None, number = None):
  1298. v = number * 50
  1299. i = v - 50
  1300. div = '<div>'
  1301. curs.execute("select * from history where ip = '" + pymysql.escape_string(name) + "' order by date desc")
  1302. rows = curs.fetchall()
  1303. if(rows):
  1304. admin = admincheck()
  1305. while True:
  1306. try:
  1307. a = rows[i]
  1308. except:
  1309. div = div + '</div>'
  1310. if(number != 1):
  1311. div = div + '<br><a href="/record/' + parse.quote(name).replace('/','%2F') + '/n/' + str(number - 1) + '">(이전)'
  1312. break
  1313. if(rows[i]['send']):
  1314. send = rows[i]['send']
  1315. send = re.sub('<a href="\/w\/(?P<in>[^"]*)">(?P<out>[^&]*)<\/a>', '<a href="/w/\g<in>">\g<out></a>', send)
  1316. else:
  1317. send = '<br>'
  1318. title = rows[i]['title']
  1319. title = re.sub('<', '&lt;', title)
  1320. title = re.sub('>', '&gt;', title)
  1321. m = re.search("\+", rows[i]['leng'])
  1322. n = re.search("\-", rows[i]['leng'])
  1323. if(m):
  1324. leng = '<span style="color:green;">' + rows[i]['leng'] + '</span>'
  1325. elif(n):
  1326. leng = '<span style="color:red;">' + rows[i]['leng'] + '</span>'
  1327. else:
  1328. leng = '<span style="color:gray;">' + rows[i]['leng'] + '</span>'
  1329. if(admin == 1):
  1330. curs.execute("select * from ban where block = '" + pymysql.escape_string(rows[i]['ip']) + "'")
  1331. row = curs.fetchall()
  1332. if(row):
  1333. ban = ' <a href="/ban/' + parse.quote(rows[i]['ip']).replace('/','%2F') + '">(해제)</a>'
  1334. else:
  1335. ban = ' <a href="/ban/' + parse.quote(rows[i]['ip']).replace('/','%2F') + '">(차단)</a>'
  1336. else:
  1337. ban = ''
  1338. if(re.search('\.', rows[i]['ip'])):
  1339. ip = rows[i]['ip']
  1340. else:
  1341. curs.execute("select * from data where title = '사용자:" + pymysql.escape_string(rows[i]['ip']) + "'")
  1342. row = curs.fetchall()
  1343. if(row):
  1344. ip = '<a href="/w/' + parse.quote('사용자:' + rows[i]['ip']).replace('/','%2F') + '">' + rows[i]['ip'] + '</a>'
  1345. else:
  1346. ip = '<a class="not_thing" href="/w/' + parse.quote('사용자:' + rows[i]['ip']).replace('/','%2F') + '">' + rows[i]['ip'] + '</a>'
  1347. if((int(rows[i]['id']) - 1) == 0):
  1348. revert = ''
  1349. else:
  1350. revert = '<a href="/revert/' + parse.quote(rows[i]['title']).replace('/','%2F') + '/r/' + str(int(rows[i]['id']) - 1) + '">(되돌리기)</a>'
  1351. div = div + '<table style="width: 100%;"><tbody><tr><td style="text-align: center;width:33.33%;"><a href="/w/' + parse.quote(rows[i]['title']).replace('/','%2F') + '">' + title + '</a> r' + rows[i]['id'] + ' <a href="/history/' + parse.quote(rows[i]['title']).replace('/','%2F') + '/n/1">(역사)</a> ' + revert + ' (' + leng + ')</td><td style="text-align: center;width:33.33%;">' + ip + ban + '</td><td style="text-align: center;width:33.33%;">' + rows[i]['date'] + '</td></tr><tr><td colspan="3" style="text-align: center;width:100%;">' + send + '</td></tr></tbody></table>'
  1352. if(i == v):
  1353. div = div + '</div>'
  1354. if(number == 1):
  1355. div = div + '<br><a href="/record/' + parse.quote(name).replace('/','%2F') + '/n/' + str(number + 1) + '">(다음)'
  1356. else:
  1357. div = div + '<br><a href="/record/' + parse.quote(name).replace('/','%2F') + '/n/' + str(number - 1) + '">(이전) <a href="/record/' + parse.quote(name).replace('/','%2F') + '/n/' + str(number + 1) + '">(다음)'
  1358. break
  1359. else:
  1360. i = i + 1
  1361. return render_template('index.html', logo = data['name'], rows = div, tn = 3, title = '유저 기록')
  1362. else:
  1363. return render_template('index.html', logo = data['name'], rows = '', tn = 3, title = '유저 기록')
  1364. @app.route('/userlog/n/<int:number>')
  1365. def userlog(number = None):
  1366. v = number * 50
  1367. i = v - 50
  1368. div = ''
  1369. curs.execute("select * from user")
  1370. rows = curs.fetchall()
  1371. if(rows):
  1372. admin = admincheck()
  1373. while True:
  1374. try:
  1375. a = rows[i]
  1376. except:
  1377. if(number != 1):
  1378. div = div + '<br><a href="/userlog/n/' + str(number - 1) + '">(이전)'
  1379. break
  1380. if(admin == 1):
  1381. curs.execute("select * from ban where block = '" + pymysql.escape_string(rows[i]['id']) + "'")
  1382. row = curs.fetchall()
  1383. if(row):
  1384. ban = ' <a href="/ban/' + parse.quote(rows[i]['id']).replace('/','%2F') + '">(해제)</a>'
  1385. else:
  1386. ban = ' <a href="/ban/' + parse.quote(rows[i]['id']).replace('/','%2F') + '">(차단)</a>'
  1387. else:
  1388. ban = ''
  1389. if(re.search('\.', rows[i]['id'])):
  1390. ip = rows[i]['id']
  1391. else:
  1392. curs.execute("select * from data where title = '사용자:" + pymysql.escape_string(rows[i]['id']) + "'")
  1393. row = curs.fetchall()
  1394. if(row):
  1395. ip = '<a href="/w/' + parse.quote('사용자:' + rows[i]['id']).replace('/','%2F') + '">' + rows[i]['id'] + '</a>'
  1396. else:
  1397. ip = '<a class="not_thing" href="/w/' + parse.quote('사용자:' + rows[i]['id']).replace('/','%2F') + '">' + rows[i]['id'] + '</a>'
  1398. div = div + '<li>' + ip + ban + '</li>'
  1399. if(i == v):
  1400. if(number == 1):
  1401. div = div + '<br><a href="/userlog/n/' + str(number + 1) + '">(다음)'
  1402. else:
  1403. div = div + '<br><a href="/userlog/n/' + str(number - 1) + '">(이전) <a href="/userlog/n/' + str(number + 1) + '">(다음)'
  1404. break
  1405. else:
  1406. i = i + 1
  1407. return render_template('index.html', logo = data['name'], data = div, title = '유저 가입 기록')
  1408. else:
  1409. return render_template('index.html', logo = data['name'], data = '', title = '유저 가입 기록')
  1410. @app.route('/backlink/<path:name>/n/<int:number>')
  1411. def backlink(name = None, number = None):
  1412. v = number * 50
  1413. i = v - 50
  1414. div = ''
  1415. curs.execute("select * from back where title = '" + pymysql.escape_string(name) + "' order by link asc")
  1416. rows = curs.fetchall()
  1417. if(rows):
  1418. while True:
  1419. try:
  1420. a = rows[i]
  1421. except:
  1422. if(number != 1):
  1423. div = div + '<br><a href="/backlink/n/' + str(number - 1) + '">(이전)'
  1424. break
  1425. if(not re.search('^사용자:', rows[i]['link'])):
  1426. curs.execute("select * from data where title = '" + pymysql.escape_string(rows[i]['link']) + "'")
  1427. row = curs.fetchall()
  1428. if(row):
  1429. aa = row[0]['data']
  1430. aa = re.sub("(?P<in>\[include\((?P<out>(?:(?!\)\]|,).)*)((?:,\s?(?:[^)]*))+)?\)\])", "\g<in>\n\n[[\g<out>]]\n\n", aa)
  1431. aa = re.sub('^#(?:redirect|넘겨주기)\s(?P<in>[^\n]*)', '[[\g<in>]]', aa)
  1432. aa = namumark('', aa)
  1433. if(re.search("<a(?: class=\"not_thing\")? href=\"\/w\/" + parse.quote(name).replace('/','%2F') + "(?:\#[^\"]*)?\">([^<]*)<\/a>", aa)):
  1434. div = div + '<li><a href="/w/' + parse.quote(rows[i]['link']).replace('/','%2F') + '">' + rows[i]['link'] + '</a>'
  1435. if(rows[i]['type']):
  1436. div = div + ' (' + rows[i]['type'] + ')</li>'
  1437. else:
  1438. div = div + '</li>'
  1439. if(i == v):
  1440. if(number == 1):
  1441. div = div + '<br><a href="/backlink/' + parse.quote(name).replace('/','%2F') + '/n/' + str(number + 1) + '">(다음)'
  1442. else:
  1443. div = div + '<br><a href="/backlink/' + parse.quote(name).replace('/','%2F') + '/n/' + str(number - 1) + '">(이전) <a href="/backlink/' + parse.quote(name).replace('/','%2F') + '/n/' + str(number + 1) + '">(다음)'
  1444. break
  1445. else:
  1446. i = i + 1
  1447. else:
  1448. curs.execute("delete from back where title = '" + pymysql.escape_string(name) + "' and link = '" + pymysql.escape_string(rows[i]['link']) + "'")
  1449. conn.commit()
  1450. i = i + 1
  1451. v = v + 1
  1452. else:
  1453. curs.execute("delete from back where title = '" + pymysql.escape_string(name) + "' and link = '" + pymysql.escape_string(rows[i]['link']) + "'")
  1454. conn.commit()
  1455. i = i + 1
  1456. v = v + 1
  1457. else:
  1458. curs.execute("delete from back where title = '" + pymysql.escape_string(name) + "' and link = '" + pymysql.escape_string(rows[i]['link']) + "'")
  1459. conn.commit()
  1460. i = i + 1
  1461. v = v + 1
  1462. return render_template('index.html', logo = data['name'], data = div, title = name, plus = '(역링크)')
  1463. else:
  1464. return render_template('index.html', logo = data['name'], data = '', title = name, plus = '(역링크)')
  1465. @app.route('/recentdiscuss')
  1466. def recentdiscuss():
  1467. i = 0
  1468. div = '<div>'
  1469. curs.execute("select * from rd order by date desc limit 50")
  1470. rows = curs.fetchall()
  1471. if(rows):
  1472. while True:
  1473. try:
  1474. a = rows[i]
  1475. except:
  1476. div = div + '</div>'
  1477. break
  1478. title = rows[i]['title']
  1479. title = re.sub('<', '&lt;', title)
  1480. title = re.sub('>', '&gt;', title)
  1481. sub = rows[i]['sub']
  1482. sub = re.sub('<', '&lt;', sub)
  1483. sub = re.sub('>', '&gt;', sub)
  1484. div = div + '<table style="width: 100%;"><tbody><tr><td style="text-align: center;width:50%;"><a href="/topic/' + parse.quote(rows[i]['title']).replace('/','%2F') + '/sub/' + parse.quote(rows[i]['sub']).replace('/','%2F') + '">' + title + '</a> (' + sub + ')</td><td style="text-align: center;width:50%;">' + rows[i]['date'] + '</td></tr></tbody></table>'
  1485. i = i + 1
  1486. return render_template('index.html', logo = data['name'], rows = div, tn = 12, title = '최근 토론내역')
  1487. else:
  1488. return render_template('index.html', logo = data['name'], rows = '', tn = 12, title = '최근 토론내역')
  1489. @app.route('/blocklog/n/<int:number>')
  1490. def blocklog(number = None):
  1491. v = number * 50
  1492. i = v - 50
  1493. div = '<div>'
  1494. curs.execute("select * from rb order by today desc")
  1495. rows = curs.fetchall()
  1496. if(rows):
  1497. while True:
  1498. try:
  1499. a = rows[i]
  1500. except:
  1501. div = div + '</div>'
  1502. if(number != 1):
  1503. div = div + '<br><a href="/blocklog/n/' + str(number - 1) + '">(이전)'
  1504. break
  1505. why = rows[i]['why']
  1506. why = re.sub('<', '&lt;', why)
  1507. why = re.sub('>', '&gt;', why)
  1508. b = re.search("^([0-9](?:[0-9]?[0-9]?)\.[0-9](?:[0-9]?[0-9]?))$", rows[i]['block'])
  1509. if(b):
  1510. ip = rows[i]['block'] + ' (대역)'
  1511. else:
  1512. ip = rows[i]['block']
  1513. div = div + '<table style="width: 100%;"><tbody><tr><td style="text-align: center;width:20%;">' + ip + '</a></td><td style="text-align: center;width:20%;">' + rows[i]['blocker'] + '</td><td style="text-align: center;width:20%;">' + rows[i]['end'] + '</td><td style="text-align: center;width:20%;">' + rows[i]['why'] + '</td><td style="text-align: center;width:20%;">' + rows[i]['today'] + '</td></tr></tbody></table>'
  1514. if(i == v):
  1515. div = div + '</div>'
  1516. if(number == 1):
  1517. div = div + '<br><a href="/blocklog/n/' + str(number + 1) + '">(다음)'
  1518. else:
  1519. div = div + '<br><a href="/blocklog/n/' + str(number - 1) + '">(이전) <a href="/blocklog/n/' + str(number + 1) + '">(다음)'
  1520. break
  1521. else:
  1522. i = i + 1
  1523. return render_template('index.html', logo = data['name'], rows = div, tn = 20, title = '유저 차단 기록')
  1524. else:
  1525. return render_template('index.html', logo = data['name'], rows = '', tn = 20, title = '유저 차단 기록')
  1526. @app.route('/history/<path:name>/n/<int:number>', methods=['POST', 'GET'])
  1527. def gethistory(name = None, number = None):
  1528. if(request.method == 'POST'):
  1529. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(name).replace('/','%2F') + '/r/' + request.form["b"] + '/diff/' + request.form["a"] + '" />'
  1530. else:
  1531. select = ''
  1532. v = number * 50
  1533. i = v - 50
  1534. div = '<div>'
  1535. curs.execute("select * from history where title = '" + pymysql.escape_string(name) + "' order by id+0 desc")
  1536. rows = curs.fetchall()
  1537. if(rows):
  1538. admin = admincheck()
  1539. while True:
  1540. try:
  1541. a = rows[i]
  1542. except:
  1543. div = div + '</div>'
  1544. if(number != 1):
  1545. div = div + '<br><a href="/history/' + parse.quote(name).replace('/','%2F') + '/n/' + str(number - 1) + '">(이전)'
  1546. break
  1547. select = '<option value="' + str(i + 1) + '">' + str(i + 1) + '</option>' + select
  1548. if(rows[i]['send']):
  1549. send = rows[i]['send']
  1550. send = re.sub('<a href="\/w\/(?P<in>[^"]*)">(?P<out>[^&]*)<\/a>', '<a href="/w/\g<in>">\g<out></a>', send)
  1551. else:
  1552. send = '<br>'
  1553. m = re.search("\+", rows[i]['leng'])
  1554. n = re.search("\-", rows[i]['leng'])
  1555. if(m):
  1556. leng = '<span style="color:green;">' + rows[i]['leng'] + '</span>'
  1557. elif(n):
  1558. leng = '<span style="color:red;">' + rows[i]['leng'] + '</span>'
  1559. else:
  1560. leng = '<span style="color:gray;">' + rows[i]['leng'] + '</span>'
  1561. if(admin == 1):
  1562. curs.execute("select * from user where id = '" + pymysql.escape_string(rows[i]['ip']) + "'")
  1563. row = curs.fetchall()
  1564. if(row):
  1565. if(row[0]['acl'] == 'owner' or row[0]['acl'] == 'admin'):
  1566. ban = ''
  1567. else:
  1568. curs.execute("select * from ban where block = '" + pymysql.escape_string(rows[i]['ip']) + "'")
  1569. row = curs.fetchall()
  1570. if(row):
  1571. ban = ' <a href="/ban/' + parse.quote(rows[i]['ip']).replace('/','%2F') + '">(해제)</a>'
  1572. else:
  1573. ban = ' <a href="/ban/' + parse.quote(rows[i]['ip']).replace('/','%2F') + '">(차단)</a>'
  1574. else:
  1575. curs.execute("select * from ban where block = '" + pymysql.escape_string(rows[i]['ip']) + "'")
  1576. row = curs.fetchall()
  1577. if(row):
  1578. ban = ' <a href="/ban/' + parse.quote(rows[i]['ip']).replace('/','%2F') + '">(해제)</a>'
  1579. else:
  1580. ban = ' <a href="/ban/' + parse.quote(rows[i]['ip']).replace('/','%2F') + '">(차단)</a>'
  1581. else:
  1582. ban = ''
  1583. if(re.search("\.", rows[i]["ip"])):
  1584. ip = rows[i]["ip"]
  1585. else:
  1586. curs.execute("select * from data where title = '사용자:" + pymysql.escape_string(rows[i]['ip']) + "'")
  1587. row = curs.fetchall()
  1588. if(row):
  1589. ip = '<a href="/w/' + parse.quote('사용자:' + rows[i]['ip']).replace('/','%2F') + '">' + rows[i]['ip'] + '</a>'
  1590. else:
  1591. ip = '<a class="not_thing" href="/w/' + parse.quote('사용자:' + rows[i]['ip']).replace('/','%2F') + '">' + rows[i]['ip'] + '</a>'
  1592. div = div + '<table style="width: 100%;"><tbody><tr><td style="text-align: center;width:33.33%;">r' + rows[i]['id'] + '</a> <a href="/w/' + parse.quote(rows[i]['title']).replace('/','%2F') + '/r/' + rows[i]['id'] + '">(w)</a> <a href="/w/' + parse.quote(rows[i]['title']).replace('/','%2F') + '/raw/' + rows[i]['id'] + '">(Raw)</a> <a href="/revert/' + parse.quote(rows[i]['title']).replace('/','%2F') + '/r/' + rows[i]['id'] + '">(되돌리기)</a> (' + leng + ')</td><td style="text-align: center;width:33.33%;">' + ip + ban + '</td><td style="text-align: center;width:33.33%;">' + rows[i]['date'] + '</td></tr><tr><td colspan="3" style="text-align: center;width:100%;">' + send + '</td></tr></tbody></table>'
  1593. if(i == v):
  1594. div = div + '</div>'
  1595. if(number == 1):
  1596. div = div + '<br><a href="/history/' + parse.quote(name).replace('/','%2F') + '/n/' + str(number + 1) + '">(다음)'
  1597. else:
  1598. div = div + '<br><a href="/history/' + parse.quote(name).replace('/','%2F') + '/n/' + str(number - 1) + '">(이전) <a href="/history/' + parse.quote(name).replace('/','%2F') + '/n/' + str(number + 1) + '">(다음)'
  1599. break
  1600. else:
  1601. i = i + 1
  1602. return render_template('index.html', logo = data['name'], rows = div, tn = 5, title = name, page = parse.quote(name).replace('/','%2F'), select = select)
  1603. else:
  1604. return render_template('index.html', logo = data['name'], rows = '', tn = 5, title = name, page = parse.quote(name).replace('/','%2F'), select = select)
  1605. @app.route('/search', methods=['POST', 'GET'])
  1606. def search():
  1607. if(request.method == 'POST'):
  1608. curs.execute("select * from data where title = '" + pymysql.escape_string(request.form["search"]) + "'")
  1609. rows = curs.fetchall()
  1610. if(rows):
  1611. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(request.form["search"]).replace('/','%2F') + '" />'
  1612. else:
  1613. curs.execute("select * from data where title like '%" + pymysql.escape_string(request.form["search"]) + "%'")
  1614. rows = curs.fetchall()
  1615. div = ''
  1616. if(rows):
  1617. i = 0
  1618. div = div + '<li>문서가 없습니다. <a href="/w/' + parse.quote(request.form["search"]).replace('/','%2F') + '">바로가기</a></li><br>'
  1619. while True:
  1620. try:
  1621. div = div + '<li><a href="/w/' + parse.quote(rows[i]['title']).replace('/','%2F') + '">' + rows[i]['title'] + '</a></li>'
  1622. except:
  1623. break
  1624. i = i + 1
  1625. else:
  1626. return div + '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(request.form["search"]).replace('/','%2F') + '" />'
  1627. return render_template('index.html', logo = data['name'], data = div, title = '검색')
  1628. else:
  1629. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(data['frontpage']).replace('/','%2F') + '" />'
  1630. @app.route('/w/<path:name>')
  1631. def w(name = None):
  1632. i = 0
  1633. curs.execute("select * from rd where title = '" + pymysql.escape_string(name) + "' order by date asc")
  1634. rows = curs.fetchall()
  1635. while True:
  1636. try:
  1637. a = rows[i]
  1638. except:
  1639. topic = ""
  1640. break
  1641. curs.execute("select * from stop where title = '" + pymysql.escape_string(rows[i]['title']) + "' and sub = '" + pymysql.escape_string(rows[i]['sub']) + "' and close = 'O'")
  1642. row = curs.fetchall()
  1643. if(not row):
  1644. topic = "open"
  1645. break
  1646. else:
  1647. i = i + 1
  1648. acl = ''
  1649. m = re.search("^(.*)\/(.*)$", name)
  1650. if(m):
  1651. g = m.groups()
  1652. uppage = g[0]
  1653. style = ""
  1654. else:
  1655. uppage = ""
  1656. style = "display:none;"
  1657. if(re.search("^분류:", name)):
  1658. curs.execute("select * from cat where title = '" + pymysql.escape_string(name) + "' order by cat asc")
  1659. rows = curs.fetchall()
  1660. if(rows):
  1661. div = ''
  1662. i = 0
  1663. while True:
  1664. try:
  1665. a = rows[i]
  1666. except:
  1667. break
  1668. curs.execute("select * from data where title = '" + pymysql.escape_string(rows[i]['cat']) + "'")
  1669. row = curs.fetchall()
  1670. if(row):
  1671. aa = row[0]['data']
  1672. aa = namumark('', aa)
  1673. bb = re.search('<div style="width:100%;border: 1px solid #777;padding: 5px;margin-top: 1em;">분류:((?:(?!<\/div>).)*)<\/div>', aa)
  1674. if(bb):
  1675. cc = bb.groups()
  1676. mm = re.search("^분류:(.*)", name)
  1677. if(mm):
  1678. ee = mm.groups()
  1679. if(re.search("<a href=\"\/w\/" + parse.quote(name).replace('/','%2F') + "\">" + ee[0] + "<\/a>", cc[0])):
  1680. div = div + '<li><a href="/w/' + parse.quote(rows[i]['cat']).replace('/','%2F') + '">' + rows[i]['cat'] + '</a></li>'
  1681. i = i + 1
  1682. else:
  1683. curs.execute("delete from cat where title = '" + pymysql.escape_string(rows[i]['cat']) + "' and cat = '" + pymysql.escape_string(name) + "'")
  1684. conn.commit()
  1685. i = i + 1
  1686. else:
  1687. curs.execute("delete from cat where title = '" + pymysql.escape_string(rows[i]['cat']) + "' and cat = '" + pymysql.escape_string(name) + "'")
  1688. conn.commit()
  1689. i = i + 1
  1690. else:
  1691. curs.execute("delete from cat where title = '" + pymysql.escape_string(rows[i]['cat']) + "' and cat = '" + pymysql.escape_string(name) + "'")
  1692. conn.commit()
  1693. i = i + 1
  1694. else:
  1695. curs.execute("delete from cat where title = '" + pymysql.escape_string(rows[i]['cat']) + "' and cat = '" + pymysql.escape_string(name) + "'")
  1696. conn.commit()
  1697. i = i + 1
  1698. div = '<h2>분류</h2>' + div
  1699. curs.execute("select * from data where title = '" + pymysql.escape_string(name) + "'")
  1700. bb = curs.fetchall()
  1701. if(bb):
  1702. if(bb[0]['acl'] == 'admin'):
  1703. acl = '(관리자)'
  1704. elif(bb[0]['acl'] == 'user'):
  1705. acl = '(유저)'
  1706. else:
  1707. if(not acl):
  1708. acl = ''
  1709. enddata = namumark(name, bb[0]['data'])
  1710. m = re.search('<div id="toc">((?:(?!\/div>).)*)<\/div>', enddata)
  1711. if(m):
  1712. result = m.groups()
  1713. left = result[0]
  1714. else:
  1715. left = ''
  1716. return render_template('index.html', title = name, logo = data['name'], page = parse.quote(name).replace('/','%2F'), data = enddata + '<br>' + div, license = data['license'], tn = 1, uppage = uppage, style = style, acl = acl, topic = topic)
  1717. else:
  1718. return render_template('index.html', title = name, logo = data['name'], page = parse.quote(name).replace('/','%2F'), data = div, license = data['license'], tn = 1, uppage = uppage, style = style, acl = acl, topic = topic)
  1719. else:
  1720. return render_template('index.html', title = name, logo = data['name'], page = parse.quote(name).replace('/','%2F'), data = '분류 문서 없음', license = data['license'], tn = 1, uppage = uppage, style = style, acl = acl, topic = topic), 404
  1721. else:
  1722. m = re.search("^사용자:(.*)", name)
  1723. if(m):
  1724. g = m.groups()
  1725. curs.execute("select * from user where id = '" + pymysql.escape_string(g[0]) + "'")
  1726. rows = curs.fetchall()
  1727. if(rows):
  1728. if(rows[0]['acl'] == 'owner'):
  1729. acl = '(소유자)'
  1730. elif(rows[0]['acl'] == 'admin'):
  1731. acl = '(관리자)'
  1732. curs.execute("select * from data where title = '" + pymysql.escape_string(name) + "'")
  1733. rows = curs.fetchall()
  1734. if(rows):
  1735. if(rows[0]['acl'] == 'admin'):
  1736. acl = '(관리자)'
  1737. elif(rows[0]['acl'] == 'user'):
  1738. acl = '(유저)'
  1739. else:
  1740. if(not acl):
  1741. acl = ''
  1742. enddata = namumark(name, rows[0]['data'])
  1743. m = re.search('<div id="toc">((?:(?!\/div>).)*)<\/div>', enddata)
  1744. if(m):
  1745. result = m.groups()
  1746. left = result[0]
  1747. else:
  1748. left = ''
  1749. return render_template('index.html', title = name, logo = data['name'], page = parse.quote(name).replace('/','%2F'), data = enddata, license = data['license'], tn = 1, acl = acl, left = left, uppage = uppage, style = style, topic = topic)
  1750. else:
  1751. return render_template('index.html', title = name, logo = data['name'], page = parse.quote(name).replace('/','%2F'), data = '문서 없음', license = data['license'], tn = 1, uppage = uppage, style = style, acl = acl, topic = topic), 404
  1752. @app.route('/w/<path:name>/from/<path:redirect>')
  1753. def redirectw(name = None, redirect = None):
  1754. i = 0
  1755. curs.execute("select * from rd where title = '" + pymysql.escape_string(name) + "' order by date asc")
  1756. rows = curs.fetchall()
  1757. while True:
  1758. try:
  1759. a = rows[i]
  1760. except:
  1761. topic = ""
  1762. break
  1763. curs.execute("select * from stop where title = '" + pymysql.escape_string(rows[i]['title']) + "' and sub = '" + pymysql.escape_string(rows[i]['sub']) + "' and close = 'O'")
  1764. row = curs.fetchall()
  1765. if(not row):
  1766. topic = "open"
  1767. break
  1768. else:
  1769. i = i + 1
  1770. acl = ''
  1771. m = re.search("^(.*)\/(.*)$", name)
  1772. if(m):
  1773. g = m.groups()
  1774. uppage = g[0]
  1775. style = ""
  1776. else:
  1777. uppage = ""
  1778. style = "display:none;"
  1779. if(re.search("^분류:", name)):
  1780. curs.execute("select * from cat where title = '" + pymysql.escape_string(name) + "' order by cat asc")
  1781. rows = curs.fetchall()
  1782. if(rows):
  1783. div = ''
  1784. i = 0
  1785. while True:
  1786. try:
  1787. a = rows[i]
  1788. except:
  1789. break
  1790. curs.execute("select * from data where title = '" + pymysql.escape_string(rows[i]['cat']) + "'")
  1791. row = curs.fetchall()
  1792. if(row):
  1793. aa = row[0]['data']
  1794. aa = namumark('', aa)
  1795. bb = re.search('<div style="width:100%;border: 1px solid #777;padding: 5px;margin-top: 1em;">분류:((?:(?!<\/div>).)*)<\/div>', aa)
  1796. if(bb):
  1797. cc = bb.groups()
  1798. mm = re.search("^분류:(.*)", name)
  1799. if(mm):
  1800. ee = mm.groups()
  1801. if(re.search("<a href=\"\/w\/" + parse.quote(name).replace('/','%2F') + "\">" + ee[0] + "<\/a>", cc[0])):
  1802. div = div + '<li><a href="/w/' + parse.quote(rows[i]['cat']).replace('/','%2F') + '">' + rows[i]['cat'] + '</a></li>'
  1803. i = i + 1
  1804. else:
  1805. curs.execute("delete from cat where title = '" + pymysql.escape_string(rows[i]['cat']) + "' and cat = '" + pymysql.escape_string(name) + "'")
  1806. conn.commit()
  1807. i = i + 1
  1808. else:
  1809. curs.execute("delete from cat where title = '" + pymysql.escape_string(rows[i]['cat']) + "' and cat = '" + pymysql.escape_string(name) + "'")
  1810. conn.commit()
  1811. i = i + 1
  1812. else:
  1813. curs.execute("delete from cat where title = '" + pymysql.escape_string(rows[i]['cat']) + "' and cat = '" + pymysql.escape_string(name) + "'")
  1814. conn.commit()
  1815. i = i + 1
  1816. else:
  1817. curs.execute("delete from cat where title = '" + pymysql.escape_string(rows[i]['cat']) + "' and cat = '" + pymysql.escape_string(name) + "'")
  1818. conn.commit()
  1819. i = i + 1
  1820. div = '<h2>분류</h2>' + div
  1821. curs.execute("select * from data where title = '" + pymysql.escape_string(name) + "'")
  1822. bb = curs.fetchall()
  1823. if(bb):
  1824. if(bb[0]['acl'] == 'admin'):
  1825. acl = '(관리자)'
  1826. elif(bb[0]['acl'] == 'user'):
  1827. acl = '(유저)'
  1828. else:
  1829. if(not acl):
  1830. acl = ''
  1831. newdata = re.sub('^#(?:redirect|넘겨주기)\s(?P<in>[^\n]*)', ' * \g<in> 문서로 넘겨주기', bb[0]['data'])
  1832. enddata = namumark(name, newdata)
  1833. m = re.search('<div id="toc">((?:(?!\/div>).)*)<\/div>', enddata)
  1834. if(m):
  1835. result = m.groups()
  1836. left = result[0]
  1837. else:
  1838. left = ''
  1839. return render_template('index.html', title = name, logo = data['name'], page = parse.quote(name).replace('/','%2F'), data = enddata + '<br>' + div, license = data['license'], tn = 1, uppage = uppage, style = style, acl = acl, topic = topic, redirect = '<a href="/w/' + parse.quote(redirect).replace('/','%2F') + '/from/' + parse.quote(name).replace('/','%2F') + '">' + redirect + '</a>에서 넘어 왔습니다.')
  1840. else:
  1841. return render_template('index.html', title = name, logo = data['name'], page = parse.quote(name).replace('/','%2F'), data = div, license = data['license'], tn = 1, uppage = uppage, style = style, acl = acl, topic = topic, redirect = '<a href="/w/' + parse.quote(redirect).replace('/','%2F') + '/from/' + parse.quote(name).replace('/','%2F') + '">' + redirect + '</a>에서 넘어 왔습니다.')
  1842. else:
  1843. return render_template('index.html', title = name, logo = data['name'], page = parse.quote(name).replace('/','%2F'), data = '분류 문서 없음', license = data['license'], tn = 1, uppage = uppage, style = style, acl = acl, topic = topic, redirect = '<a href="/w/' + parse.quote(redirect).replace('/','%2F') + '/from/' + parse.quote(name).replace('/','%2F') + '">' + redirect + '</a>에서 넘어 왔습니다.'), 404
  1844. else:
  1845. m = re.search("^사용자:(.*)", name)
  1846. if(m):
  1847. g = m.groups()
  1848. curs.execute("select * from user where id = '" + pymysql.escape_string(g[0]) + "'")
  1849. rows = curs.fetchall()
  1850. if(rows):
  1851. if(rows[0]['acl'] == 'owner'):
  1852. acl = '(소유자)'
  1853. elif(rows[0]['acl'] == 'admin'):
  1854. acl = '(관리자)'
  1855. curs.execute("select * from data where title = '" + pymysql.escape_string(name) + "'")
  1856. rows = curs.fetchall()
  1857. if(rows):
  1858. if(rows[0]['acl'] == 'admin'):
  1859. acl = '(관리자)'
  1860. elif(rows[0]['acl'] == 'user'):
  1861. acl = '(유저)'
  1862. else:
  1863. if(not acl):
  1864. acl = ''
  1865. newdata = re.sub('^#(?:redirect|넘겨주기)\s(?P<in>[^\n]*)', ' * \g<in> 문서로 넘겨주기', rows[0]["data"])
  1866. enddata = namumark(name, newdata)
  1867. m = re.search('<div id="toc">((?:(?!\/div>).)*)<\/div>', enddata)
  1868. if(m):
  1869. result = m.groups()
  1870. left = result[0]
  1871. else:
  1872. left = ''
  1873. return render_template('index.html', title = name, logo = data['name'], page = parse.quote(name).replace('/','%2F'), data = enddata, license = data['license'], tn = 1, acl = acl, left = left, uppage = uppage, style = style, topic = topic, redirect = '<a href="/w/' + parse.quote(redirect).replace('/','%2F') + '/from/' + parse.quote(name).replace('/','%2F') + '">' + redirect + '</a>에서 넘어 왔습니다.')
  1874. else:
  1875. return render_template('index.html', title = name, logo = data['name'], page = parse.quote(name).replace('/','%2F'), data = '문서 없음', license = data['license'], tn = 1, uppage = uppage, style = style, acl = acl, topic = topic, redirect = '<a href="/w/' + parse.quote(redirect).replace('/','%2F') + '/from/' + parse.quote(name).replace('/','%2F') + '">' + redirect + '</a>에서 넘어 왔습니다.'), 404
  1876. @app.route('/w/<path:name>/r/<int:number>')
  1877. def rew(name = None, number = None):
  1878. curs.execute("select * from history where title = '" + pymysql.escape_string(name) + "' and id = '" + str(number) + "'")
  1879. rows = curs.fetchall()
  1880. if(rows):
  1881. enddata = namumark(name, rows[0]['data'])
  1882. m = re.search('<div id="toc">((?:(?!\/div>).)*)<\/div>', enddata)
  1883. if(m):
  1884. result = m.groups()
  1885. left = result[0]
  1886. else:
  1887. left = ''
  1888. return render_template('index.html', title = name, logo = data['name'], page = parse.quote(name).replace('/','%2F'), data = enddata, license = data['license'], tn = 6, left = left)
  1889. else:
  1890. return '<meta http-equiv="refresh" content="0;url=/history/' + parse.quote(name).replace('/','%2F') + '" />'
  1891. @app.route('/w/<path:name>/raw/<int:number>')
  1892. def reraw(name = None, number = None):
  1893. curs.execute("select * from history where title = '" + pymysql.escape_string(name) + "' and id = '" + str(number) + "'")
  1894. rows = curs.fetchall()
  1895. if(rows):
  1896. enddata = re.sub('<', '&lt;', rows[0]['data'])
  1897. enddata = re.sub('>', '&gt;', enddata)
  1898. enddata = re.sub('"', '&quot;', enddata)
  1899. enddata = re.sub("\n", '<br>', enddata)
  1900. return render_template('index.html', title = name, logo = data['name'], page = parse.quote(name).replace('/','%2F'), data = enddata, license = data['license'])
  1901. else:
  1902. return '<meta http-equiv="refresh" content="0;url=/history/' + parse.quote(name).replace('/','%2F') + '" />'
  1903. @app.route('/raw/<path:name>')
  1904. def raw(name = None):
  1905. curs.execute("select * from data where title = '" + pymysql.escape_string(name) + "'")
  1906. rows = curs.fetchall()
  1907. if(rows):
  1908. enddata = re.sub('<', '&lt;', rows[0]['data'])
  1909. enddata = re.sub('>', '&gt;', enddata)
  1910. enddata = re.sub('"', '&quot;', enddata)
  1911. enddata = re.sub("\n", '<br>', enddata)
  1912. return render_template('index.html', title = name, logo = data['name'], page = parse.quote(name).replace('/','%2F'), data = enddata, license = data['license'], tn = 7)
  1913. else:
  1914. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(name).replace('/','%2F') + '" />'
  1915. @app.route('/revert/<path:name>/r/<int:number>', methods=['POST', 'GET'])
  1916. def revert(name = None, number = None):
  1917. if(request.method == 'POST'):
  1918. curs.execute("select * from history where title = '" + pymysql.escape_string(name) + "' and id = '" + str(number) + "'")
  1919. rows = curs.fetchall()
  1920. if(rows):
  1921. ip = getip(request)
  1922. can = getcan(ip, name)
  1923. if(can == 1):
  1924. return '<meta http-equiv="refresh" content="0;url=/ban" />'
  1925. else:
  1926. today = getnow()
  1927. curs.execute("select * from data where title = '" + pymysql.escape_string(name) + "'")
  1928. row = curs.fetchall()
  1929. if(row):
  1930. leng = getleng(len(row[0]['data']), len(rows[0]['data']))
  1931. curs.execute("update data set data = '" + pymysql.escape_string(rows[0]['data']) + "' where title = '" + pymysql.escape_string(name) + "'")
  1932. conn.commit()
  1933. else:
  1934. leng = '+' + str(len(rows[0]['data']))
  1935. curs.execute("insert into data (title, data, acl) value ('" + pymysql.escape_string(name) + "', '" + pymysql.escape_string(rows[0]['data']) + "', '')")
  1936. conn.commit()
  1937. history(name, rows[0]['data'], today, ip, '문서를 ' + str(number) + '판으로 되돌렸습니다.', leng)
  1938. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(name).replace('/','%2F') + '" />'
  1939. else:
  1940. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(name).replace('/','%2F') + '" />'
  1941. else:
  1942. ip = getip(request)
  1943. can = getcan(ip, name)
  1944. if(can == 1):
  1945. return '<meta http-equiv="refresh" content="0;url=/ban" />'
  1946. else:
  1947. curs.execute("select * from history where title = '" + pymysql.escape_string(name) + "' and id = '" + str(number) + "'")
  1948. rows = curs.fetchall()
  1949. if(rows):
  1950. return render_template('index.html', title = name, logo = data['name'], page = parse.quote(name).replace('/','%2F'), r = parse.quote(str(number)).replace('/','%2F'), tn = 13, plus = '정말 되돌리시겠습니까?')
  1951. else:
  1952. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(name).replace('/','%2F') + '" />'
  1953. @app.route('/edit/<path:name>', methods=['POST', 'GET'])
  1954. def edit(name = None):
  1955. if(request.method == 'POST'):
  1956. m = re.search('(?:[^A-Za-zㄱ-힣0-9 ])', request.form["send"])
  1957. if(m):
  1958. return '<meta http-equiv="refresh" content="0;url=/error/17" />'
  1959. else:
  1960. today = getnow()
  1961. content = re.sub("\[date\(now\)\]", today, request.form["content"])
  1962. curs.execute("select * from data where title = '" + pymysql.escape_string(name) + "'")
  1963. rows = curs.fetchall()
  1964. if(rows):
  1965. if(rows[0]['data'] == content):
  1966. return '<meta http-equiv="refresh" content="0;url=/error/18" />'
  1967. else:
  1968. ip = getip(request)
  1969. can = getcan(ip, name)
  1970. if(can == 1):
  1971. return '<meta http-equiv="refresh" content="0;url=/ban" />'
  1972. else:
  1973. leng = getleng(len(rows[0]['data']), len(content))
  1974. history(name, content, today, ip, request.form["send"], leng)
  1975. curs.execute("update data set data = '" + pymysql.escape_string(content) + "' where title = '" + pymysql.escape_string(name) + "'")
  1976. conn.commit()
  1977. else:
  1978. ip = getip(request)
  1979. can = getcan(ip, name)
  1980. if(can == 1):
  1981. return '<meta http-equiv="refresh" content="0;url=/ban" />'
  1982. else:
  1983. leng = '+' + str(len(content))
  1984. history(name, content, today, ip, request.form["send"], leng)
  1985. curs.execute("insert into data (title, data, acl) value ('" + pymysql.escape_string(name) + "', '" + pymysql.escape_string(content) + "', '')")
  1986. conn.commit()
  1987. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(name).replace('/','%2F') + '" />'
  1988. else:
  1989. ip = getip(request)
  1990. can = getcan(ip, name)
  1991. if(can == 1):
  1992. return '<meta http-equiv="refresh" content="0;url=/ban" />'
  1993. else:
  1994. curs.execute("select * from data where title = '" + pymysql.escape_string(data["help"]) + "'")
  1995. rows = curs.fetchall()
  1996. if(rows):
  1997. newdata = re.sub('^#(?:redirect|넘겨주기)\s(?P<in>[^\n]*)', ' * \g<in> 문서로 넘겨주기', rows[0]["data"])
  1998. left = namumark(name, newdata)
  1999. else:
  2000. left = ''
  2001. if(re.search('\.', ip)):
  2002. notice = '비 로그인 상태 입니다. 비 로그인으로 편집시 아이피가 역사에 기록 됩니다. 편집 시 동의 함으로 간주 됩니다.'
  2003. else:
  2004. notice = ''
  2005. curs.execute("select * from data where title = '" + pymysql.escape_string(name) + "'")
  2006. rows = curs.fetchall()
  2007. if(rows):
  2008. return render_template('index.html', title = name, logo = data['name'], page = parse.quote(name).replace('/','%2F'), data = rows[0]['data'], tn = 2, notice = notice, left = left)
  2009. else:
  2010. return render_template('index.html', title = name, logo = data['name'], page = parse.quote(name).replace('/','%2F'), data = '', tn = 2, notice = notice, left = left)
  2011. @app.route('/edit/<path:name>/section/<int:number>', methods=['POST', 'GET'])
  2012. def secedit(name = None, number = None):
  2013. if(request.method == 'POST'):
  2014. m = re.search('(?:[^A-Za-zㄱ-힣0-9 ])', request.form["send"])
  2015. if(m):
  2016. return '<meta http-equiv="refresh" content="0;url=/error/17" />'
  2017. else:
  2018. today = getnow()
  2019. content = re.sub("\[date\(now\)\]", today, request.form["content"])
  2020. curs.execute("select * from data where title = '" + pymysql.escape_string(name) + "'")
  2021. rows = curs.fetchall()
  2022. if(rows):
  2023. if(request.form["otent"] == content):
  2024. return '<meta http-equiv="refresh" content="0;url=/error/18" />'
  2025. else:
  2026. ip = getip(request)
  2027. can = getcan(ip, name)
  2028. if(can == 1):
  2029. return '<meta http-equiv="refresh" content="0;url=/ban" />'
  2030. else:
  2031. leng = getleng(len(request.form['otent']), len(content))
  2032. content = rows[0]['data'].replace(request.form['otent'], content)
  2033. history(name, content, today, ip, request.form["send"], leng)
  2034. curs.execute("update data set data = '" + pymysql.escape_string(content) + "' where title = '" + pymysql.escape_string(name) + "'")
  2035. conn.commit()
  2036. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(name).replace('/','%2F') + '" />'
  2037. else:
  2038. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(name).replace('/','%2F') + '" />'
  2039. else:
  2040. ip = getip(request)
  2041. can = getcan(ip, name)
  2042. if(can == 1):
  2043. return '<meta http-equiv="refresh" content="0;url=/ban" />'
  2044. else:
  2045. curs.execute("select * from data where title = '" + pymysql.escape_string(data["help"]) + "'")
  2046. rows = curs.fetchall()
  2047. if(rows):
  2048. newdata = re.sub('^#(?:redirect|넘겨주기)\s(?P<in>[^\n]*)', ' * \g<in> 문서로 넘겨주기', rows[0]["data"])
  2049. left = namumark(name, newdata)
  2050. else:
  2051. left = ''
  2052. if(re.search('\.', ip)):
  2053. notice = '비 로그인 상태 입니다. 비 로그인으로 편집시 아이피가 역사에 기록 됩니다. 편집 시 동의 함으로 간주 됩니다.'
  2054. else:
  2055. notice = ''
  2056. curs.execute("select * from data where title = '" + pymysql.escape_string(name) + "'")
  2057. rows = curs.fetchall()
  2058. if(rows):
  2059. i = 0
  2060. j = 0
  2061. gdata = rows[0]['data'] + '\r\n'
  2062. while True:
  2063. m = re.search("((?:={1,6})\s?(?:[^=]*)\s?(?:={1,6})(?:\s+)?\n(?:(?:(?:(?!(?:={1,6})\s?(?:[^=]*)\s?(?:={1,6})(?:\s+)?\n).)*)(?:\n)?)+)", gdata)
  2064. if(m):
  2065. if(i == number - 1):
  2066. g = m.groups()
  2067. gdata = re.sub("\r\n$", "", g[0])
  2068. break
  2069. else:
  2070. gdata = re.sub("((?:={1,6})\s?(?:[^=]*)\s?(?:={1,6})(?:\s+)?\n(?:(?:(?:(?!(?:={1,6})\s?(?:[^=]*)\s?(?:={1,6})(?:\s+)?\n).)*)(?:\n)?)+)", "", gdata, 1)
  2071. i = i + 1
  2072. else:
  2073. j = 1
  2074. break
  2075. if(j == 0):
  2076. return render_template('index.html', title = name, logo = data['name'], page = parse.quote(name).replace('/','%2F'), data = gdata, tn = 2, notice = notice, left = left, section = 1, number = number)
  2077. else:
  2078. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(name).replace('/','%2F') + '" />'
  2079. else:
  2080. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(name).replace('/','%2F') + '" />'
  2081. @app.route('/preview/<path:name>', methods=['POST'])
  2082. def preview(name = None):
  2083. ip = getip(request)
  2084. can = getcan(ip, name)
  2085. if(can == 1):
  2086. return '<meta http-equiv="refresh" content="0;url=/ban" />'
  2087. else:
  2088. if(re.search('\.', ip)):
  2089. notice = '비 로그인 상태 입니다. 비 로그인으로 편집시 아이피가 역사에 기록 됩니다. 편집 시 동의 함으로 간주 됩니다.'
  2090. else:
  2091. notice = ''
  2092. newdata = request.form["content"]
  2093. newdata = re.sub('^#(?:redirect|넘겨주기)\s(?P<in>[^\n]*)', ' * \g<in> 문서로 넘겨주기', newdata)
  2094. enddata = namumark(name, newdata)
  2095. curs.execute("select * from data where title = '" + pymysql.escape_string(data["help"]) + "'")
  2096. rows = curs.fetchall()
  2097. if(rows):
  2098. newdata = re.sub('^#(?:redirect|넘겨주기)\s(?P<in>[^\n]*)', ' * \g<in> 문서로 넘겨주기', rows[0]["data"])
  2099. left = namumark(name, newdata)
  2100. else:
  2101. left = ''
  2102. return render_template('index.html', title = name, logo = data['name'], page = parse.quote(name).replace('/','%2F'), data = request.form["content"], tn = 2, preview = 1, enddata = enddata, left = left, notice = notice)
  2103. @app.route('/preview/<path:name>/section/<int:number>', methods=['POST'])
  2104. def secpreview(name = None, number = None):
  2105. ip = getip(request)
  2106. can = getcan(ip, name)
  2107. if(can == 1):
  2108. return '<meta http-equiv="refresh" content="0;url=/ban" />'
  2109. else:
  2110. if(re.search('\.', ip)):
  2111. notice = '비 로그인 상태 입니다. 비 로그인으로 편집시 아이피가 역사에 기록 됩니다. 편집 시 동의 함으로 간주 됩니다.'
  2112. else:
  2113. notice = ''
  2114. newdata = request.form["content"]
  2115. newdata = re.sub('^#(?:redirect|넘겨주기)\s(?P<in>[^\n]*)', ' * \g<in> 문서로 넘겨주기', newdata)
  2116. enddata = namumark(name, newdata)
  2117. curs.execute("select * from data where title = '" + pymysql.escape_string(data["help"]) + "'")
  2118. rows = curs.fetchall()
  2119. if(rows):
  2120. newdata = re.sub('^#(?:redirect|넘겨주기)\s(?P<in>[^\n]*)', ' * \g<in> 문서로 넘겨주기', rows[0]["data"])
  2121. left = namumark(name, newdata)
  2122. else:
  2123. left = ''
  2124. return render_template('index.html', title = name, logo = data['name'], page = parse.quote(name).replace('/','%2F'), data = request.form["content"], tn = 2, preview = 1, enddata = enddata, left = left, notice = notice, section = 1, number = number, odata = request.form["otent"])
  2125. @app.route('/delete/<path:name>', methods=['POST', 'GET'])
  2126. def delete(name = None):
  2127. if(request.method == 'POST'):
  2128. curs.execute("select * from data where title = '" + pymysql.escape_string(name) + "'")
  2129. rows = curs.fetchall()
  2130. if(rows):
  2131. ip = getip(request)
  2132. can = getcan(ip, name)
  2133. if(can == 1):
  2134. return '<meta http-equiv="refresh" content="0;url=/ban" />'
  2135. else:
  2136. today = getnow()
  2137. leng = '-' + str(len(rows[0]['data']))
  2138. history(name, '', today, ip, '문서를 삭제 했습니다.', leng)
  2139. curs.execute("delete from data where title = '" + pymysql.escape_string(name) + "'")
  2140. conn.commit()
  2141. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(name).replace('/','%2F') + '" />'
  2142. else:
  2143. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(name).replace('/','%2F') + '" />'
  2144. else:
  2145. curs.execute("select * from data where title = '" + pymysql.escape_string(name) + "'")
  2146. rows = curs.fetchall()
  2147. if(rows):
  2148. ip = getip(request)
  2149. can = getcan(ip, name)
  2150. if(can == 1):
  2151. return '<meta http-equiv="refresh" content="0;url=/ban" />'
  2152. else:
  2153. return render_template('index.html', title = name, logo = data['name'], page = parse.quote(name).replace('/','%2F'), tn = 8, plus = '정말 삭제 하시겠습니까?')
  2154. else:
  2155. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(name).replace('/','%2F') + '" />'
  2156. @app.route('/move/<path:name>', methods=['POST', 'GET'])
  2157. def move(name = None):
  2158. if(request.method == 'POST'):
  2159. curs.execute("select * from data where title = '" + pymysql.escape_string(name) + "'")
  2160. rows = curs.fetchall()
  2161. if(rows):
  2162. ip = getip(request)
  2163. can = getcan(ip, name)
  2164. if(can == 1):
  2165. return '<meta http-equiv="refresh" content="0;url=/ban" />'
  2166. else:
  2167. today = getnow()
  2168. leng = '0'
  2169. curs.execute("select * from history where title = '" + pymysql.escape_string(request.form["title"]) + "'")
  2170. row = curs.fetchall()
  2171. if(row):
  2172. return '<meta http-equiv="refresh" content="0;url=/error/19" />'
  2173. else:
  2174. history(name, rows[0]['data'], today, ip, '<a href="/w/' + parse.quote(name).replace('/','%2F') + '">' + name + '</a> 문서를 <a href="/w/' + parse.quote(request.form["title"]).replace('/','%2F') + '">' + request.form["title"] + '</a> 문서로 이동 했습니다.', leng)
  2175. curs.execute("update data set title = '" + pymysql.escape_string(request.form["title"]) + "' where title = '" + pymysql.escape_string(name) + "'")
  2176. curs.execute("update history set title = '" + pymysql.escape_string(request.form["title"]) + "' where title = '" + pymysql.escape_string(name) + "'")
  2177. conn.commit()
  2178. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(request.form["title"]).replace('/','%2F') + '" />'
  2179. else:
  2180. ip = getip(request)
  2181. can = getcan(ip, name)
  2182. if(can == 1):
  2183. return '<meta http-equiv="refresh" content="0;url=/ban" />'
  2184. else:
  2185. today = getnow()
  2186. leng = '0'
  2187. curs.execute("select * from history where title = '" + pymysql.escape_string(request.form["title"]) + "'")
  2188. row = curs.fetchall()
  2189. if(row):
  2190. return '<meta http-equiv="refresh" content="0;url=/error/19" />'
  2191. else:
  2192. history(name, '', today, ip, '<a href="/w/' + parse.quote(name).replace('/','%2F') + '">' + name + '</a> 문서를 <a href="/w/' + parse.quote(request.form["title"]).replace('/','%2F') + '">' + request.form["title"] + '</a> 문서로 이동 했습니다.', leng)
  2193. curs.execute("update history set title = '" + pymysql.escape_string(request.form["title"]) + "' where title = '" + pymysql.escape_string(name) + "'")
  2194. conn.commit()
  2195. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(request.form["title"]).replace('/','%2F') + '" />'
  2196. else:
  2197. ip = getip(request)
  2198. can = getcan(ip, name)
  2199. if(can == 1):
  2200. return '<meta http-equiv="refresh" content="0;url=/ban" />'
  2201. else:
  2202. return render_template('index.html', title = name, logo = data['name'], page = parse.quote(name).replace('/','%2F'), tn = 9, plus = '정말 이동 하시겠습니까?')
  2203. @app.route('/other')
  2204. def other():
  2205. return render_template('index.html', title = '기타 메뉴', logo = data['name'], data = '<li><a href="/titleindex">모든 문서</a></li><li><a href="/blocklog/n/1">유저 차단 기록</a></li><li><a href="/userlog/n/1">유저 가입 기록</a></li><li><a href="/upload">업로드</a></li><li><a href="/manager/1">관리자 메뉴</a></li><li><a href="/manager/6">유저 기록</a></li><br>이 오픈나무의 버전은 <a href="https://github.com/2DU/openNAMU/blob/master/version.md">1.7.5</a> 입니다.')
  2206. @app.route('/manager/<int:num>', methods=['POST', 'GET'])
  2207. def manager(num = None):
  2208. if(num == 1):
  2209. return render_template('index.html', title = '관리자 메뉴', logo = data['name'], data = '<li><a href="/manager/2">문서 ACL</a></li><li><a href="/manager/3">유저 체크</a></li><li><a href="/manager/4">유저 차단</a></li><li><a href="/manager/5">관리자 권한 주기</a></li>')
  2210. elif(num == 2):
  2211. if(request.method == 'POST'):
  2212. return '<meta http-equiv="refresh" content="0;url=/acl/' + parse.quote(request.form["name"]).replace('/','%2F') + '" />'
  2213. else:
  2214. return render_template('index.html', title = 'ACL 이동', logo = data['name'], data = '<form id="usrform" method="POST" action="/manager/2"><input name="name" type="text"><br><br><button class="btn btn-primary" type="submit">이동</button></form>')
  2215. elif(num == 3):
  2216. if(request.method == 'POST'):
  2217. return '<meta http-equiv="refresh" content="0;url=/check/' + parse.quote(request.form["name"]).replace('/','%2F') + '" />'
  2218. else:
  2219. return render_template('index.html', title = '체크 이동', logo = data['name'], data = '<form id="usrform" method="POST" action="/manager/3"><input name="name" type="text"><br><br><button class="btn btn-primary" type="submit">이동</button></form>')
  2220. elif(num == 4):
  2221. if(request.method == 'POST'):
  2222. return '<meta http-equiv="refresh" content="0;url=/ban/' + parse.quote(request.form["name"]).replace('/','%2F') + '" />'
  2223. else:
  2224. return render_template('index.html', title = '차단 이동', logo = data['name'], data = '<form id="usrform" method="POST" action="/manager/4"><input name="name" type="text"><br><br><button class="btn btn-primary" type="submit">이동</button><br><br><span>아이피 앞 두자리 (XXX.XXX) 입력하면 대역 차단</span></form>')
  2225. elif(num == 5):
  2226. if(request.method == 'POST'):
  2227. return '<meta http-equiv="refresh" content="0;url=/admin/' + parse.quote(request.form["name"]).replace('/','%2F') + '" />'
  2228. else:
  2229. return render_template('index.html', title = '권한 이동', logo = data['name'], data = '<form id="usrform" method="POST" action="/manager/5"><input name="name" type="text"><br><br><button class="btn btn-primary" type="submit">이동</button></form>')
  2230. elif(num == 6):
  2231. if(request.method == 'POST'):
  2232. return '<meta http-equiv="refresh" content="0;url=/record/' + parse.quote(request.form["name"]).replace('/','%2F') + '/n/1" />'
  2233. else:
  2234. return render_template('index.html', title = '기록 이동', logo = data['name'], data = '<form id="usrform" method="POST" action="/manager/6"><input name="name" type="text"><br><br><button class="btn btn-primary" type="submit">이동</button></form>')
  2235. else:
  2236. return '<meta http-equiv="refresh" content="0;url=/" />'
  2237. @app.route('/titleindex')
  2238. def titleindex():
  2239. i = 0
  2240. div = '<div>'
  2241. curs.execute("select * from data order by title asc")
  2242. rows = curs.fetchall()
  2243. if(rows):
  2244. while True:
  2245. try:
  2246. a = rows[i]
  2247. except:
  2248. div = div + '</div>'
  2249. break
  2250. div = div + '<li><a href="/w/' + parse.quote(rows[i]['title']).replace('/','%2F') + '">' + rows[i]['title'] + '</a></li>'
  2251. i = i + 1
  2252. return render_template('index.html', logo = data['name'], rows = div + '<br><span>이 위키에는 총 ' + str(i + 1) + '개의 문서가 있습니다.</span>', tn = 4, title = '모든 문서')
  2253. else:
  2254. return render_template('index.html', logo = data['name'], rows = '', tn = 4, title = '모든 문서')
  2255. @app.route('/topic/<path:name>', methods=['POST', 'GET'])
  2256. def topic(name = None):
  2257. if(request.method == 'POST'):
  2258. return '<meta http-equiv="refresh" content="0;url=/topic/' + parse.quote(name).replace('/','%2F') + '/sub/' + parse.quote(request.form["topic"]).replace('/','%2F') + '" />'
  2259. else:
  2260. div = '<div>'
  2261. i = 0
  2262. j = 1
  2263. curs.execute("select * from rd where title = '" + pymysql.escape_string(name) + "' order by date asc")
  2264. rows = curs.fetchall()
  2265. while True:
  2266. try:
  2267. a = rows[i]
  2268. except:
  2269. div = div + '</div>'
  2270. break
  2271. curs.execute("select * from topic where title = '" + pymysql.escape_string(rows[i]['title']) + "' and sub = '" + pymysql.escape_string(rows[i]['sub']) + "' and id = '1' order by sub asc")
  2272. aa = curs.fetchall()
  2273. indata = namumark(name, aa[0]['data'])
  2274. if(aa[0]['block'] == 'O'):
  2275. indata = '블라인드 되었습니다.'
  2276. block = 'style="background: gainsboro;"'
  2277. else:
  2278. block = ''
  2279. curs.execute("select * from stop where title = '" + pymysql.escape_string(rows[i]['title']) + "' and sub = '" + pymysql.escape_string(rows[i]['sub']) + "' and close = 'O'")
  2280. row = curs.fetchall()
  2281. if(not row):
  2282. div = div + '<h2><a href="/topic/' + parse.quote(rows[i]['title']).replace('/','%2F') + '/sub/' + parse.quote(rows[i]['sub']).replace('/','%2F') + '">' + str(j) + '. ' + rows[i]['sub'] + '</a></h2>'
  2283. div = div + '<table id="toron"><tbody><tr><td id="toroncolorgreen"><a href="javascript:void(0);" id="1">#1</a> ' + aa[0]['ip'] + ' <span style="float:right;">' + aa[0]['date'] + '</span></td></tr><tr><td ' + block + '>' + indata + '</td></tr></tbody></table><br>'
  2284. j = j + 1
  2285. i = i + 1
  2286. return render_template('index.html', title = name, page = parse.quote(name).replace('/','%2F'), logo = data['name'], plus = div, tn = 10, list = 1)
  2287. @app.route('/topic/<path:name>/close')
  2288. def topicstoplist(name = None):
  2289. if(request.method == 'POST'):
  2290. return '<meta http-equiv="refresh" content="0;url=/topic/' + parse.quote(name).replace('/','%2F') + '/sub/' + parse.quote(request.form["topic"]).replace('/','%2F') + '" />'
  2291. else:
  2292. div = '<div>'
  2293. i = 0
  2294. curs.execute("select * from stop where title = '" + pymysql.escape_string(name) + "' and close = 'O' order by sub asc")
  2295. rows = curs.fetchall()
  2296. while True:
  2297. try:
  2298. a = rows[i]
  2299. except:
  2300. div = div + '</div>'
  2301. break
  2302. curs.execute("select * from topic where title = '" + pymysql.escape_string(name) + "' and sub = '" + pymysql.escape_string(rows[i]['sub']) + "' and id = '1'")
  2303. row = curs.fetchall()
  2304. if(row):
  2305. j = i + 1
  2306. indata = namumark(name, row[0]['data'])
  2307. if(row[0]['block'] == 'O'):
  2308. indata = '블라인드 되었습니다.'
  2309. block = 'style="background: gainsboro;"'
  2310. else:
  2311. block = ''
  2312. div = div + '<h2><a href="/topic/' + parse.quote(name).replace('/','%2F') + '/sub/' + parse.quote(rows[i]['sub']).replace('/','%2F') + '">' + str((i + 1)) + '. ' + rows[i]['sub'] + '</a></h2>'
  2313. div = div + '<table id="toron"><tbody><tr><td id="toroncolorgreen"><a href="javascript:void(0);" id="' + str(j) + '">#' + str(j) + '</a> ' + row[0]['ip'] + ' <span style="float:right;">' + row[0]['date'] + '</span></td></tr><tr><td ' + block + '>' + indata + '</td></tr></tbody></table><br>'
  2314. i = i + 1
  2315. return render_template('index.html', title = name, page = parse.quote(name).replace('/','%2F'), logo = data['name'], plus = div, tn = 10)
  2316. @app.route('/topic/<path:name>/sub/<path:sub>', methods=['POST', 'GET'])
  2317. def sub(name = None, sub = None):
  2318. if(request.method == 'POST'):
  2319. curs.execute("select * from topic where title = '" + pymysql.escape_string(name) + "' and sub = '" + pymysql.escape_string(sub) + "' order by id+0 desc limit 1")
  2320. rows = curs.fetchall()
  2321. if(rows):
  2322. number = int(rows[0]['id']) + 1
  2323. else:
  2324. number = 1
  2325. ip = getip(request)
  2326. ban = getdiscuss(ip, name, sub)
  2327. if(ban == 1):
  2328. return '<meta http-equiv="refresh" content="0;url=/ban" />'
  2329. else:
  2330. curs.execute("select * from user where id = '" + pymysql.escape_string(ip) + "'")
  2331. rows = curs.fetchall()
  2332. if(rows):
  2333. if(rows[0]['acl'] == 'owner' or rows[0]['acl'] == 'admin'):
  2334. ip = ip + ' - Admin'
  2335. today = getnow()
  2336. discuss(name, sub, today)
  2337. aa = request.form["content"]
  2338. aa = re.sub("\[\[(분류:(?:(?:(?!\]\]).)*))\]\]", "[br]", aa)
  2339. aa = re.sub("\[date\(now\)\]", today, aa)
  2340. curs.execute("insert into topic (id, title, sub, data, date, ip, block) value ('" + str(number) + "', '" + pymysql.escape_string(name) + "', '" + pymysql.escape_string(sub) + "', '" + pymysql.escape_string(aa) + "', '" + today + "', '" + ip + "', '')")
  2341. conn.commit()
  2342. return '<meta http-equiv="refresh" content="0;url=/topic/' + parse.quote(name).replace('/','%2F') + '/sub/' + parse.quote(sub).replace('/','%2F') + '" />'
  2343. else:
  2344. ip = getip(request)
  2345. ban = getdiscuss(ip, name, sub)
  2346. admin = admincheck()
  2347. if(admin == 1):
  2348. div = '<div>' + '<a href="/topic/' + parse.quote(name).replace('/','%2F') + '/sub/' + parse.quote(sub).replace('/','%2F') + '/close">(토론 닫기 및 열기)</a>' + ' <a href="/topic/' + parse.quote(name).replace('/','%2F') + '/sub/' + parse.quote(sub).replace('/','%2F') + '/stop">(토론 정지 및 재개)</a><br><br>'
  2349. else:
  2350. div = '<div>'
  2351. i = 0
  2352. curs.execute("select * from topic where title = '" + pymysql.escape_string(name) + "' and sub = '" + pymysql.escape_string(sub) + "' order by id+0 asc")
  2353. rows = curs.fetchall()
  2354. while True:
  2355. try:
  2356. a = rows[i]
  2357. except:
  2358. div = div + '</div>'
  2359. break
  2360. if(i == 0):
  2361. start = rows[i]['ip']
  2362. indata = namumark(name, rows[i]['data'])
  2363. if(rows[i]['block'] == 'O'):
  2364. indata = '블라인드 되었습니다.'
  2365. block = 'style="background: gainsboro;"'
  2366. else:
  2367. block = ''
  2368. m = re.search("([^-]*)\s\-\s(Close|Reopen|Stop|Restart)$", rows[i]['ip'])
  2369. if(m):
  2370. ban = ""
  2371. else:
  2372. if(admin == 1):
  2373. curs.execute("select * from ban where block = '" + pymysql.escape_string(rows[i]['ip']) + "'")
  2374. row = curs.fetchall()
  2375. if(rows[i]['block'] == 'O'):
  2376. isblock = ' <a href="/topic/' + parse.quote(name).replace('/','%2F') + '/sub/' + parse.quote(sub).replace('/','%2F') + '/b/' + str(i + 1) + '">(해제)</a>'
  2377. else:
  2378. isblock = ' <a href="/topic/' + parse.quote(name).replace('/','%2F') + '/sub/' + parse.quote(sub).replace('/','%2F') + '/b/' + str(i + 1) + '">(블라인드)</a>'
  2379. n = re.search("\- (?:Admin)$", rows[i]['ip'])
  2380. if(n):
  2381. ban = isblock
  2382. else:
  2383. if(row):
  2384. ban = ' <a href="/ban/' + parse.quote(rows[i]['ip']).replace('/','%2F') + '">(해제)</a>' + isblock
  2385. else:
  2386. ban = ' <a href="/ban/' + parse.quote(rows[i]['ip']).replace('/','%2F') + '">(차단)</a>' + isblock
  2387. else:
  2388. ban = ""
  2389. m = re.search("([^-]*)\s\-\s(Close|Reopen|Stop|Restart|Admin)$", rows[i]['ip'])
  2390. if(m):
  2391. g = m.groups()
  2392. curs.execute("select * from data where title = '사용자:" + pymysql.escape_string(g[0]) + "'")
  2393. row = curs.fetchall()
  2394. if(row):
  2395. ip = '<a href="/w/' + parse.quote('사용자:' + g[0]).replace('/','%2F') + '">' + g[0] + '</a> - ' + g[1]
  2396. else:
  2397. ip = '<a class="not_thing" href="/w/' + parse.quote('사용자:' + g[0]).replace('/','%2F') + '">' + g[0] + '</a> - ' + g[1]
  2398. elif(re.search("\.", rows[i]["ip"])):
  2399. ip = rows[i]["ip"]
  2400. else:
  2401. curs.execute("select * from data where title = '사용자:" + pymysql.escape_string(rows[i]['ip']) + "'")
  2402. row = curs.fetchall()
  2403. if(row):
  2404. ip = '<a href="/w/' + parse.quote('사용자:' + rows[i]['ip']).replace('/','%2F') + '">' + rows[i]['ip'] + '</a>'
  2405. else:
  2406. ip = '<a class="not_thing" href="/w/' + parse.quote('사용자:' + rows[i]['ip']).replace('/','%2F') + '">' + rows[i]['ip'] + '</a>'
  2407. if(rows[i]['ip'] == start):
  2408. j = i + 1
  2409. div = div + '<table id="toron"><tbody><tr><td id="toroncolorgreen"><a href="javascript:void(0);" id="' + str(j) + '">#' + str(j) + '</a> ' + ip + ban + ' <span style="float:right;">' + rows[i]['date'] + '</span></td></tr><tr><td ' + block + '>' + indata + '</td></tr></tbody></table><br>'
  2410. else:
  2411. j = i + 1
  2412. div = div + '<table id="toron"><tbody><tr><td id="toroncolor"><a href="javascript:void(0);" id="' + str(j) + '">#' + str(j) + '</a> ' + ip + ban + ' <span style="float:right;">' + rows[i]['date'] + '</span></td></tr><tr><td ' + block + '>' + indata + '</td></tr></tbody></table><br>'
  2413. i = i + 1
  2414. return render_template('index.html', title = name, page = parse.quote(name).replace('/','%2F'), suburl = parse.quote(sub).replace('/','%2F'), sub = sub, logo = data['name'], rows = div, tn = 11, ban = ban)
  2415. @app.route('/topic/<path:name>/sub/<path:sub>/b/<number>')
  2416. def blind(name = None, sub = None, number = None):
  2417. if(session.get('Now') == True):
  2418. ip = getip(request)
  2419. curs.execute("select * from user where id = '" + pymysql.escape_string(ip) + "'")
  2420. rows = curs.fetchall()
  2421. if(rows):
  2422. if(rows[0]['acl'] == 'owner' or rows[0]['acl'] == 'admin'):
  2423. curs.execute("select * from topic where title = '" + pymysql.escape_string(name) + "' and sub = '" + pymysql.escape_string(sub) + "' and id = '" + number + "'")
  2424. row = curs.fetchall()
  2425. if(row):
  2426. if(row[0]['block'] == 'O'):
  2427. curs.execute("update topic set block = '' where title = '" + pymysql.escape_string(name) + "' and sub = '" + pymysql.escape_string(sub) + "' and id = '" + number + "'")
  2428. else:
  2429. curs.execute("update topic set block = 'O' where title = '" + pymysql.escape_string(name) + "' and sub = '" + pymysql.escape_string(sub) + "' and id = '" + number + "'")
  2430. conn.commit()
  2431. return '<meta http-equiv="refresh" content="0;url=/topic/' + name + '/sub/' + sub + '" />'
  2432. else:
  2433. return '<meta http-equiv="refresh" content="0;url=/topic/' + name + '/sub/' + sub + '" />'
  2434. else:
  2435. return '<meta http-equiv="refresh" content="0;url=/error/3" />'
  2436. else:
  2437. return '<meta http-equiv="refresh" content="0;url=/error/2" />'
  2438. else:
  2439. return '<meta http-equiv="refresh" content="0;url=/error/1" />'
  2440. @app.route('/topic/<path:name>/sub/<path:sub>/stop')
  2441. def topicstop(name = None, sub = None):
  2442. if(session.get('Now') == True):
  2443. ip = getip(request)
  2444. curs.execute("select * from user where id = '" + pymysql.escape_string(ip) + "'")
  2445. rows = curs.fetchall()
  2446. if(rows):
  2447. if(rows[0]['acl'] == 'owner' or rows[0]['acl'] == 'admin'):
  2448. curs.execute("select * from topic where title = '" + pymysql.escape_string(name) + "' and sub = '" + pymysql.escape_string(sub) + "' order by id+0 desc limit 1")
  2449. row = curs.fetchall()
  2450. if(row):
  2451. today = getnow()
  2452. curs.execute("select * from stop where title = '" + pymysql.escape_string(name) + "' and sub = '" + pymysql.escape_string(sub) + "' and close = ''")
  2453. rows = curs.fetchall()
  2454. if(rows):
  2455. curs.execute("insert into topic (id, title, sub, data, date, ip, block) value ('" + pymysql.escape_string(str(int(row[0]['id']) + 1)) + "', '" + pymysql.escape_string(name) + "', '" + pymysql.escape_string(sub) + "', 'Restart', '" + pymysql.escape_string(today) + "', '" + pymysql.escape_string(ip) + " - Restart', '')")
  2456. curs.execute("delete from stop where title = '" + pymysql.escape_string(name) + "' and sub = '" + pymysql.escape_string(sub) + "' and close = ''")
  2457. else:
  2458. curs.execute("insert into topic (id, title, sub, data, date, ip, block) value ('" + pymysql.escape_string(str(int(row[0]['id']) + 1)) + "', '" + pymysql.escape_string(name) + "', '" + pymysql.escape_string(sub) + "', 'Stop', '" + pymysql.escape_string(today) + "', '" + pymysql.escape_string(ip) + " - Stop', '')")
  2459. curs.execute("insert into stop (title, sub, close) value ('" + pymysql.escape_string(name) + "', '" + pymysql.escape_string(sub) + "', '')")
  2460. conn.commit()
  2461. return '<meta http-equiv="refresh" content="0;url=/topic/' + name + '/sub/' + sub + '" />'
  2462. else:
  2463. return '<meta http-equiv="refresh" content="0;url=/topic/' + name + '/sub/' + sub + '" />'
  2464. else:
  2465. return '<meta http-equiv="refresh" content="0;url=/error/3" />'
  2466. else:
  2467. return '<meta http-equiv="refresh" content="0;url=/error/2" />'
  2468. else:
  2469. return '<meta http-equiv="refresh" content="0;url=/error/1" />'
  2470. @app.route('/topic/<path:name>/sub/<path:sub>/close')
  2471. def topicclose(name = None, sub = None):
  2472. if(session.get('Now') == True):
  2473. ip = getip(request)
  2474. curs.execute("select * from user where id = '" + pymysql.escape_string(ip) + "'")
  2475. rows = curs.fetchall()
  2476. if(rows):
  2477. if(rows[0]['acl'] == 'owner' or rows[0]['acl'] == 'admin'):
  2478. curs.execute("select * from topic where title = '" + pymysql.escape_string(name) + "' and sub = '" + pymysql.escape_string(sub) + "' order by id+0 desc limit 1")
  2479. row = curs.fetchall()
  2480. if(row):
  2481. today = getnow()
  2482. curs.execute("select * from stop where title = '" + pymysql.escape_string(name) + "' and sub = '" + pymysql.escape_string(sub) + "' and close = 'O'")
  2483. rows = curs.fetchall()
  2484. if(rows):
  2485. curs.execute("insert into topic (id, title, sub, data, date, ip, block) value ('" + pymysql.escape_string(str(int(row[0]['id']) + 1)) + "', '" + pymysql.escape_string(name) + "', '" + pymysql.escape_string(sub) + "', 'Reopen', '" + pymysql.escape_string(today) + "', '" + pymysql.escape_string(ip) + " - Reopen', '')")
  2486. curs.execute("delete from stop where title = '" + pymysql.escape_string(name) + "' and sub = '" + pymysql.escape_string(sub) + "' and close = 'O'")
  2487. else:
  2488. curs.execute("insert into topic (id, title, sub, data, date, ip, block) value ('" + pymysql.escape_string(str(int(row[0]['id']) + 1)) + "', '" + pymysql.escape_string(name) + "', '" + pymysql.escape_string(sub) + "', 'Close', '" + pymysql.escape_string(today) + "', '" + pymysql.escape_string(ip) + " - Close', '')")
  2489. curs.execute("insert into stop (title, sub, close) value ('" + pymysql.escape_string(name) + "', '" + pymysql.escape_string(sub) + "', 'O')")
  2490. conn.commit()
  2491. return '<meta http-equiv="refresh" content="0;url=/topic/' + name + '/sub/' + sub + '" />'
  2492. else:
  2493. return '<meta http-equiv="refresh" content="0;url=/topic/' + name + '/sub/' + sub + '" />'
  2494. else:
  2495. return '<meta http-equiv="refresh" content="0;url=/error/3" />'
  2496. else:
  2497. return '<meta http-equiv="refresh" content="0;url=/error/2" />'
  2498. else:
  2499. return '<meta http-equiv="refresh" content="0;url=/error/1" />'
  2500. @app.route('/login', methods=['POST', 'GET'])
  2501. def login():
  2502. if(request.method == 'POST'):
  2503. ip = getip(request)
  2504. ban = getban(ip)
  2505. if(ban == 1):
  2506. return '<meta http-equiv="refresh" content="0;url=/ban" />'
  2507. else:
  2508. curs.execute("select * from user where id = '" + pymysql.escape_string(request.form["id"]) + "'")
  2509. rows = curs.fetchall()
  2510. if(rows):
  2511. if(session.get('Now') == True):
  2512. return '<meta http-equiv="refresh" content="0;url=/error/11" />'
  2513. elif(bcrypt.checkpw(bytes(request.form["pw"], 'utf-8'), bytes(rows[0]['pw'], 'utf-8'))):
  2514. session['Now'] = True
  2515. session['DREAMER'] = request.form["id"]
  2516. curs.execute("insert into login (user, ip, today) value ('" + pymysql.escape_string(request.form["id"]) + "', '" + pymysql.escape_string(ip) + "', '" + pymysql.escape_string(getnow()) + "')")
  2517. conn.commit()
  2518. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(data['frontpage']).replace('/','%2F') + '" />'
  2519. else:
  2520. return '<meta http-equiv="refresh" content="0;url=/error/13" />'
  2521. else:
  2522. return '<meta http-equiv="refresh" content="0;url=/error/12" />'
  2523. else:
  2524. ip = getip(request)
  2525. ban = getban(ip)
  2526. if(ban == 1):
  2527. return '<meta http-equiv="refresh" content="0;url=/ban" />'
  2528. else:
  2529. if(session.get('Now') == True):
  2530. return '<meta http-equiv="refresh" content="0;url=/error/11" />'
  2531. else:
  2532. return render_template('index.html', title = '로그인', enter = '로그인', logo = data['name'], tn = 15)
  2533. @app.route('/change', methods=['POST', 'GET'])
  2534. def change():
  2535. if(request.method == 'POST'):
  2536. ip = getip(request)
  2537. ban = getban(ip)
  2538. if(ban == 1):
  2539. return '<meta http-equiv="refresh" content="0;url=/ban" />'
  2540. else:
  2541. curs.execute("select * from user where id = '" + pymysql.escape_string(request.form["id"]) + "'")
  2542. rows = curs.fetchall()
  2543. if(rows):
  2544. if(session.get('Now') == True):
  2545. return '<meta http-equiv="refresh" content="0;url=/logout" />'
  2546. elif(bcrypt.checkpw(bytes(request.form["pw"], 'utf-8'), bytes(rows[0]['pw'], 'utf-8'))):
  2547. hashed = bcrypt.hashpw(bytes(request.form["pw2"], 'utf-8'), bcrypt.gensalt())
  2548. curs.execute("update user set pw = '" + pymysql.escape_string(hashed.decode()) + "' where id = '" + pymysql.escape_string(request.form["id"]) + "'")
  2549. conn.commit()
  2550. return '<meta http-equiv="refresh" content="0;url=/login" />'
  2551. else:
  2552. return '<meta http-equiv="refresh" content="0;url=/error/10" />'
  2553. else:
  2554. return '<meta http-equiv="refresh" content="0;url=/error/9" />'
  2555. else:
  2556. ip = getip(request)
  2557. ban = getban(ip)
  2558. if(ban == 1):
  2559. return '<meta http-equiv="refresh" content="0;url=/ban" />'
  2560. else:
  2561. if(session.get('Now') == True):
  2562. return '<meta http-equiv="refresh" content="0;url=/logout" />'
  2563. else:
  2564. return render_template('index.html', title = '비밀번호 변경', enter = '변경', logo = data['name'], tn = 15)
  2565. @app.route('/check/<name>')
  2566. def check(name = None, sub = None, number = None):
  2567. curs.execute("select * from user where id = '" + pymysql.escape_string(name) + "'")
  2568. rows = curs.fetchall()
  2569. if(rows and rows[0]['acl'] == 'owner' or rows and rows[0]['acl'] == 'admin'):
  2570. return '<meta http-equiv="refresh" content="0;url=/error/4" />'
  2571. else:
  2572. if(admincheck() == 1):
  2573. m = re.search('(?:[0-9](?:[0-9][0-9])?\.[0-9](?:[0-9][0-9])?\.[0-9](?:[0-9][0-9])?\.[0-9](?:[0-9][0-9])?)', name)
  2574. if(m):
  2575. curs.execute("select * from login where ip = '" + pymysql.escape_string(name) + "' order by today desc")
  2576. row = curs.fetchall()
  2577. if(row):
  2578. i = 0
  2579. c = ''
  2580. while True:
  2581. try:
  2582. c = c + '<table style="width: 100%;"><tbody><tr><td style="text-align: center;width:33.33%;">' + row[i]['user'] + '</td><td style="text-align: center;width:33.33%;">' + row[i]['ip'] + '</td><td style="text-align: center;width:33.33%;">' + row[i]['today'] + '</td></tr></tbody></table>'
  2583. except:
  2584. break
  2585. i = i + 1
  2586. return render_template('index.html', title = '다중 검사', logo = data['name'], tn = 22, rows = c)
  2587. else:
  2588. return render_template('index.html', title = '다중 검사', logo = data['name'], tn = 22, rows = '')
  2589. else:
  2590. curs.execute("select * from login where user = '" + pymysql.escape_string(name) + "' order by today desc")
  2591. row = curs.fetchall()
  2592. if(row):
  2593. i = 0
  2594. c = ''
  2595. while True:
  2596. try:
  2597. c = c + '<table style="width: 100%;"><tbody><tr><td style="text-align: center;width:33.33%;">' + row[i]['user'] + '</td><td style="text-align: center;width:33.33%;">' + row[i]['ip'] + '</td><td style="text-align: center;width:33.33%;">' + row[i]['today'] + '</td></tr></tbody></table>'
  2598. except:
  2599. break
  2600. i = i + 1
  2601. return render_template('index.html', title = '다중 검사', logo = data['name'], tn = 22, rows = c)
  2602. else:
  2603. return render_template('index.html', title = '다중 검사', logo = data['name'], tn = 22, rows = '')
  2604. else:
  2605. return '<meta http-equiv="refresh" content="0;url=/error/3" />'
  2606. @app.route('/register', methods=['POST', 'GET'])
  2607. def register():
  2608. if(request.method == 'POST'):
  2609. ip = getip(request)
  2610. ban = getban(ip)
  2611. if(ban == 1):
  2612. return '<meta http-equiv="refresh" content="0;url=/ban" />'
  2613. else:
  2614. m = re.search('(?:[^A-Za-zㄱ-힣0-9 ])', request.form["id"])
  2615. if(m):
  2616. return '<meta http-equiv="refresh" content="0;url=/error/8" />'
  2617. else:
  2618. if(len(request.form["id"]) > 20):
  2619. return '<meta http-equiv="refresh" content="0;url=/error/7" />'
  2620. else:
  2621. curs.execute("select * from user where id = '" + pymysql.escape_string(request.form["id"]) + "'")
  2622. rows = curs.fetchall()
  2623. if(rows):
  2624. return '<meta http-equiv="refresh" content="0;url=/error/6" />'
  2625. else:
  2626. hashed = bcrypt.hashpw(bytes(request.form["pw"], 'utf-8'), bcrypt.gensalt())
  2627. if(request.form["id"] == data['owner']):
  2628. curs.execute("insert into user (id, pw, acl) value ('" + pymysql.escape_string(request.form["id"]) + "', '" + pymysql.escape_string(hashed.decode()) + "', 'owner')")
  2629. else:
  2630. curs.execute("insert into user (id, pw, acl) value ('" + pymysql.escape_string(request.form["id"]) + "', '" + pymysql.escape_string(hashed.decode()) + "', 'user')")
  2631. conn.commit()
  2632. return '<meta http-equiv="refresh" content="0;url=/login" />'
  2633. else:
  2634. ip = getip(request)
  2635. ban = getban(ip)
  2636. if(ban == 1):
  2637. return '<meta http-equiv="refresh" content="0;url=/ban" />'
  2638. else:
  2639. return render_template('index.html', title = '회원가입', enter = '회원가입', logo = data['name'], tn = 15)
  2640. @app.route('/logout')
  2641. def logout():
  2642. session['Now'] = False
  2643. session.pop('DREAMER', None)
  2644. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(data['frontpage']).replace('/','%2F') + '" />'
  2645. @app.route('/ban/<name>', methods=['POST', 'GET'])
  2646. def ban(name = None):
  2647. curs.execute("select * from user where id = '" + pymysql.escape_string(name) + "'")
  2648. rows = curs.fetchall()
  2649. if(rows and rows[0]['acl'] == 'owner' or rows and rows[0]['acl'] == 'admin'):
  2650. return '<meta http-equiv="refresh" content="0;url=/error/4" />'
  2651. else:
  2652. if(request.method == 'POST'):
  2653. if(admincheck() == 1):
  2654. ip = getip(request)
  2655. curs.execute("select * from ban where block = '" + pymysql.escape_string(name) + "'")
  2656. row = curs.fetchall()
  2657. if(row):
  2658. block(name, '해제', getnow(), ip, '')
  2659. curs.execute("delete from ban where block = '" + pymysql.escape_string(name) + "'")
  2660. else:
  2661. b = re.search("^([0-9](?:[0-9]?[0-9]?)\.[0-9](?:[0-9]?[0-9]?))$", name)
  2662. if(b):
  2663. block(name, request.form["end"], getnow(), ip, request.form["why"])
  2664. curs.execute("insert into ban (block, end, why, band) value ('" + pymysql.escape_string(name) + "', '" + pymysql.escape_string(request.form["end"]) + "', '" + pymysql.escape_string(request.form["why"]) + "', 'O')")
  2665. else:
  2666. block(name, request.form["end"], getnow(), ip, request.form["why"])
  2667. curs.execute("insert into ban (block, end, why, band) value ('" + pymysql.escape_string(name) + "', '" + pymysql.escape_string(request.form["end"]) + "', '" + pymysql.escape_string(request.form["why"]) + "', '')")
  2668. conn.commit()
  2669. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(data['frontpage']).replace('/','%2F') + '" />'
  2670. else:
  2671. return '<meta http-equiv="refresh" content="0;url=/error/3" />'
  2672. else:
  2673. if(admincheck() == 1):
  2674. curs.execute("select * from ban where block = '" + pymysql.escape_string(name) + "'")
  2675. row = curs.fetchall()
  2676. if(row):
  2677. now = '차단 해제'
  2678. else:
  2679. b = re.search("^([0-9](?:[0-9]?[0-9]?)\.[0-9](?:[0-9]?[0-9]?))$", name)
  2680. if(b):
  2681. now = '대역 차단'
  2682. else:
  2683. now = '차단'
  2684. return render_template('index.html', title = name, page = parse.quote(name).replace('/','%2F'), logo = data['name'], tn = 16, now = now, today = getnow())
  2685. else:
  2686. return '<meta http-equiv="refresh" content="0;url=/error/3" />'
  2687. @app.route('/acl/<path:name>', methods=['POST', 'GET'])
  2688. def acl(name = None):
  2689. if(request.method == 'POST'):
  2690. if(admincheck() == 1):
  2691. curs.execute("select * from data where title = '" + pymysql.escape_string(name) + "'")
  2692. row = curs.fetchall()
  2693. if(row):
  2694. if(request.form["select"] == 'admin'):
  2695. curs.execute("update data set acl = 'admin' where title = '" + pymysql.escape_string(name) + "'")
  2696. elif(request.form["select"] == 'user'):
  2697. curs.execute("update data set acl = 'user' where title = '" + pymysql.escape_string(name) + "'")
  2698. else:
  2699. curs.execute("update data set acl = '' where title = '" + pymysql.escape_string(name) + "'")
  2700. conn.commit()
  2701. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(name).replace('/','%2F') + '" />'
  2702. else:
  2703. return '<meta http-equiv="refresh" content="0;url=/error/3" />'
  2704. else:
  2705. if(admincheck() == 1):
  2706. curs.execute("select * from data where title = '" + pymysql.escape_string(name) + "'")
  2707. row = curs.fetchall()
  2708. if(row):
  2709. if(row[0]['acl'] == 'admin'):
  2710. now = '관리자만'
  2711. elif(row[0]['acl'] == 'user'):
  2712. now = '유저 이상'
  2713. else:
  2714. now = '일반'
  2715. return render_template('index.html', title = name, page = parse.quote(name).replace('/','%2F'), logo = data['name'], tn = 19, now = '현재 ACL 상태는 ' + now)
  2716. else:
  2717. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(name).replace('/','%2F') + '" />'
  2718. else:
  2719. return '<meta http-equiv="refresh" content="0;url=/error/3" />'
  2720. @app.route('/admin/<name>', methods=['POST', 'GET'])
  2721. def admin(name = None):
  2722. if(request.method == 'POST'):
  2723. if(session.get('Now') == True):
  2724. ip = getip(request)
  2725. curs.execute("select * from user where id = '" + pymysql.escape_string(ip) + "'")
  2726. rows = curs.fetchall()
  2727. if(rows):
  2728. if(rows[0]['acl'] == 'owner' or rows[0]['acl'] == 'admin'):
  2729. curs.execute("select * from user where id = '" + pymysql.escape_string(name) + "'")
  2730. row = curs.fetchall()
  2731. if(row):
  2732. if(row[0]['acl'] == 'admin' or row[0]['acl'] == 'owner'):
  2733. curs.execute("update user set acl = 'user' where id = '" + pymysql.escape_string(name) + "'")
  2734. else:
  2735. curs.execute("update user set acl = '" + pymysql.escape_string(request.form["select"]) + "' where id = '" + pymysql.escape_string(name) + "'")
  2736. conn.commit()
  2737. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(data['frontpage']).replace('/','%2F') + '" />'
  2738. else:
  2739. return '<meta http-equiv="refresh" content="0;url=/error/5" />'
  2740. else:
  2741. return '<meta http-equiv="refresh" content="0;url=/error/3" />'
  2742. else:
  2743. return '<meta http-equiv="refresh" content="0;url=/error/2" />'
  2744. else:
  2745. return '<meta http-equiv="refresh" content="0;url=/error/1" />'
  2746. else:
  2747. if(session.get('Now') == True):
  2748. ip = getip(request)
  2749. curs.execute("select * from user where id = '" + pymysql.escape_string(ip) + "'")
  2750. rows = curs.fetchall()
  2751. if(rows):
  2752. if(rows[0]['acl'] == 'owner'):
  2753. curs.execute("select * from user where id = '" + pymysql.escape_string(name) + "'")
  2754. row = curs.fetchall()
  2755. if(row):
  2756. if(row[0]['acl'] == 'admin' or row[0]['acl'] == 'owner'):
  2757. now = '권한 해제'
  2758. else:
  2759. now = '권한 부여'
  2760. return render_template('index.html', title = name, page = parse.quote(name).replace('/','%2F'), logo = data['name'], tn = 18, now = now)
  2761. else:
  2762. return '<meta http-equiv="refresh" content="0;url=/error/5" />'
  2763. else:
  2764. return '<meta http-equiv="refresh" content="0;url=/error/3" />'
  2765. else:
  2766. return '<meta http-equiv="refresh" content="0;url=/error/2" />'
  2767. else:
  2768. return '<meta http-equiv="refresh" content="0;url=/error/1" />'
  2769. @app.route('/ban')
  2770. def aban():
  2771. ip = getip(request)
  2772. if(getban(ip) == 1):
  2773. curs.execute("select * from ban where block = '" + pymysql.escape_string(ip) + "'")
  2774. rows = curs.fetchall()
  2775. if(rows):
  2776. if(rows[0]['end']):
  2777. end = rows[0]['end'] + ' 까지 차단 상태 입니다. / 사유 : ' + rows[0]['why']
  2778. now = getnow()
  2779. now = re.sub(':', '', now)
  2780. now = re.sub('\-', '', now)
  2781. now = re.sub(' ', '', now)
  2782. now = int(now)
  2783. day = rows[0]['end']
  2784. day = re.sub('\-', '', day)
  2785. if(now >= int(day + '000000')):
  2786. curs.execute("delete from ban where block = '" + pymysql.escape_string(ip) + "'")
  2787. conn.commit()
  2788. end = '차단이 풀렸습니다. 다시 시도 해 보세요.'
  2789. else:
  2790. end = '영구 차단 상태 입니다. / 사유 : ' + rows[0]['why']
  2791. else:
  2792. b = re.search("^([0-9](?:[0-9]?[0-9]?)\.[0-9](?:[0-9]?[0-9]?))", ip)
  2793. if(b):
  2794. results = b.groups()
  2795. curs.execute("select * from ban where block = '" + pymysql.escape_string(results[0]) + "' and band = 'O'")
  2796. row = curs.fetchall()
  2797. if(row):
  2798. if(row[0]['end']):
  2799. end = row[0]['end'] + ' 까지 차단 상태 입니다. / 사유 : ' + rows[0]['why']
  2800. now = getnow()
  2801. now = re.sub(':', '', now)
  2802. now = re.sub('\-', '', now)
  2803. now = re.sub(' ', '', now)
  2804. now = int(now)
  2805. day = row[0]['end']
  2806. day = re.sub('\-', '', day)
  2807. if(now >= int(day + '000000')):
  2808. curs.execute("delete from ban where block = '" + pymysql.escape_string(results[0]) + "' and band = 'O'")
  2809. conn.commit()
  2810. end = '차단이 풀렸습니다. 다시 시도 해 보세요.'
  2811. else:
  2812. end = '영구 차단 상태 입니다. / 사유 : ' + row[0]['why']
  2813. else:
  2814. end = '권한이 맞지 않는 상태 입니다.'
  2815. return render_template('index.html', title = '권한 오류', logo = data['name'], data = end), 401
  2816. @app.route('/w/<path:name>/r/<int:a>/diff/<int:b>')
  2817. def diff(name = None, a = None, b = None):
  2818. curs.execute("select * from history where id = '" + pymysql.escape_string(str(a)) + "' and title = '" + pymysql.escape_string(name) + "'")
  2819. rows = curs.fetchall()
  2820. if(rows):
  2821. curs.execute("select * from history where id = '" + pymysql.escape_string(str(b)) + "' and title = '" + pymysql.escape_string(name) + "'")
  2822. row = curs.fetchall()
  2823. if(row):
  2824. indata = re.sub('<', '&lt;', rows[0]['data'])
  2825. indata = re.sub('>', '&gt;', indata)
  2826. indata = re.sub('"', '&quot;', indata)
  2827. indata = re.sub('\n', '<br>', indata)
  2828. enddata = re.sub('<', '&lt;', row[0]['data'])
  2829. enddata = re.sub('>', '&gt;', enddata)
  2830. enddata = re.sub('"', '&quot;', enddata)
  2831. enddata = re.sub('\n', '<br>', enddata)
  2832. sm = difflib.SequenceMatcher(None, indata, enddata)
  2833. c = show_diff(sm)
  2834. return render_template('index.html', title = name, logo = data['name'], data = c, plus = '(비교)')
  2835. else:
  2836. return '<meta http-equiv="refresh" content="0;url=/history/' + parse.quote(name).replace('/','%2F') + '" />'
  2837. else:
  2838. return '<meta http-equiv="refresh" content="0;url=/history/' + parse.quote(name).replace('/','%2F') + '" />'
  2839. @app.route('/user')
  2840. def user():
  2841. ip = getip(request)
  2842. curs.execute("select * from user where id = '" + pymysql.escape_string(ip) + "'")
  2843. rows = curs.fetchall()
  2844. if(getban(ip) == 0):
  2845. if(rows):
  2846. if(rows[0]['acl'] == 'admin' or rows[0]['acl'] == 'owner'):
  2847. if(rows[0]['acl'] == 'admin'):
  2848. acl = '관리자'
  2849. else:
  2850. acl = '소유자'
  2851. else:
  2852. acl = '유저'
  2853. else:
  2854. acl = '일반'
  2855. else:
  2856. acl = '차단'
  2857. if(not re.search('\.', ip)):
  2858. curs.execute("select * from data where title = '사용자:" + pymysql.escape_string(ip) + "'")
  2859. row = curs.fetchall()
  2860. if(row):
  2861. ip = '<a href="/w/' + parse.quote('사용자:' + ip).replace('/','%2F') + '">' + ip + '</a>'
  2862. else:
  2863. ip = '<a class="not_thing" href="/w/' + parse.quote('사용자:' + ip).replace('/','%2F') + '">' + ip + '</a>'
  2864. return render_template('index.html', title = '유저 메뉴', logo = data['name'], data = ip + '<br><br><span>권한 상태 : ' + acl + '<br><br><li><a href="/login">로그인</a></li><li><a href="/logout">로그아웃</a></li><li><a href="/register">회원가입</a></li><li><a href="/change">비밀번호 변경</a></li>')
  2865. @app.route('/random')
  2866. def random():
  2867. curs.execute("select * from data order by rand() limit 1")
  2868. rows = curs.fetchall()
  2869. if(rows):
  2870. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(rows[0]['title']).replace('/','%2F') + '" />'
  2871. else:
  2872. return '<meta http-equiv="refresh" content="0;url=/" />'
  2873. @app.route('/error/<int:num>')
  2874. def error(num = None):
  2875. if(num == 1):
  2876. return render_template('index.html', title = '권한 오류', logo = data['name'], data = '비 로그인 상태 입니다.'), 401
  2877. elif(num == 2):
  2878. return render_template('index.html', title = '권한 오류', logo = data['name'], data = '이 계정이 없습니다.'), 401
  2879. elif(num == 3):
  2880. return render_template('index.html', title = '권한 오류', logo = data['name'], data = '권한이 모자랍니다.'), 401
  2881. elif(num == 4):
  2882. return render_template('index.html', title = '권한 오류', logo = data['name'], data = '관리자는 차단, 검사 할 수 없습니다.'), 401
  2883. elif(num == 5):
  2884. return render_template('index.html', title = '유저 오류', logo = data['name'], data = '그런 계정이 없습니다.'), 401
  2885. elif(num == 6):
  2886. return render_template('index.html', title = '가입 오류', logo = data['name'], data = '동일한 아이디의 유저가 있습니다.'), 401
  2887. elif(num == 7):
  2888. return render_template('index.html', title = '가입 오류', logo = data['name'], data = '아이디는 20글자보다 짧아야 합니다.'), 401
  2889. elif(num == 8):
  2890. return render_template('index.html', title = '가입 오류', logo = data['name'], data = '아이디에는 한글과 알파벳과 공백만 허용 됩니다.'), 401
  2891. elif(num == 9):
  2892. return render_template('index.html', title = '변경 오류', logo = data['name'], data = '그런 계정이 없습니다.'), 401
  2893. elif(num == 10):
  2894. return render_template('index.html', title = '변경 오류', logo = data['name'], data = '비밀번호가 다릅니다.'), 401
  2895. elif(num == 11):
  2896. return render_template('index.html', title = '로그인 오류', logo = data['name'], data = '이미 로그인 되어 있습니다.'), 401
  2897. elif(num == 12):
  2898. return render_template('index.html', title = '로그인 오류', logo = data['name'], data = '그런 계정이 없습니다.'), 401
  2899. elif(num == 13):
  2900. return render_template('index.html', title = '로그인 오류', logo = data['name'], data = '비밀번호가 다릅니다.'), 401
  2901. elif(num == 14):
  2902. return render_template('index.html', title = '업로드 오류', logo = data['name'], data = 'jpg, gif, jpeg, png만 가능 합니다.'), 401
  2903. elif(num == 15):
  2904. return render_template('index.html', title = '업로드 오류', logo = data['name'], data = '파일 명에 . / \ * < > | : ? 가 들어 갈 수 없습니다.'), 401
  2905. elif(num == 16):
  2906. return render_template('index.html', title = '업로드 오류', logo = data['name'], data = '동일한 이름의 파일이 있습니다.'), 401
  2907. elif(num == 17):
  2908. return render_template('index.html', title = '편집 오류', logo = data['name'], data = '편집 내용 기록에는 한글과 영어와 숫자, 공백만 허용 됩니다.'), 401
  2909. elif(num == 18):
  2910. return render_template('index.html', title = '편집 오류', logo = data['name'], data = '내용이 원래 문서와 동일 합니다.'), 401
  2911. elif(num == 19):
  2912. return render_template('index.html', title = '이동 오류', logo = data['name'], data = '이동 하려는 곳에 문서가 이미 있습니다.'), 401
  2913. else:
  2914. return '<meta http-equiv="refresh" content="0;url=/" />'
  2915. @app.errorhandler(404)
  2916. def uncaughtError(error):
  2917. return '<meta http-equiv="refresh" content="0;url=/w/' + parse.quote(data['frontpage']).replace('/','%2F') + '" />'
  2918. if __name__ == '__main__':
  2919. app.run(host = '0.0.0.0', port = int(data['port']), threaded = True)