]> git.vanrenterghem.biz Git - git.ikiwiki.info.git/blobdiff - IkiWiki/Plugin/editpage.pm
fix var name
[git.ikiwiki.info.git] / IkiWiki / Plugin / editpage.pm
index 8c78e853cfc188927a4c1c225dca7a1267fdc7b4..3d094c263196a7738295f81c8995ce365c5ce091 100644 (file)
@@ -91,12 +91,15 @@ sub cgi_editpage ($$) {
        # This untaint is safe because we check file_pruned and
        # wiki_file_regexp.
        my ($page)=$form->field('page')=~/$config{wiki_file_regexp}/;
        # This untaint is safe because we check file_pruned and
        # wiki_file_regexp.
        my ($page)=$form->field('page')=~/$config{wiki_file_regexp}/;
-       if (! defined $page || ! length $page ||
-           file_pruned($page)) {
+       if (! defined $page) {
                error(gettext("bad page name"));
        }
        $page=possibly_foolish_untaint($page);
        my $absolute=($page =~ s#^/+##); # absolute name used to force location
                error(gettext("bad page name"));
        }
        $page=possibly_foolish_untaint($page);
        my $absolute=($page =~ s#^/+##); # absolute name used to force location
+       if (! defined $page || ! length $page ||
+           file_pruned($page)) {
+               error(gettext("bad page name"));
+       }
 
        my $baseurl = urlto($page);
 
 
        my $baseurl = urlto($page);
 
@@ -128,7 +131,8 @@ sub cgi_editpage ($$) {
                        # favor the type of linking page
                        $type=pagetype($pagesources{$from});
                }
                        # favor the type of linking page
                        $type=pagetype($pagesources{$from});
                }
-               $type=$config{default_pageext} unless defined $type;
+               $type=$config{default_pageext}
+                       if ! defined $type || $type=~/^_/; # not internal type
                $file=newpagefile($page, $type);
                if (! $form->submitted) {
                        $form->field(name => "rcsinfo", value => "", force => 1);
                $file=newpagefile($page, $type);
                if (! $form->submitted) {
                        $form->field(name => "rcsinfo", value => "", force => 1);