# This untaint is safe because we check file_pruned and
# wiki_file_regexp.
my ($page)=$form->field('page')=~/$config{wiki_file_regexp}/;
- $page=possibly_foolish_untaint($page);
- my $absolute=($page =~ s#^/+##); # absolute name used to force location
if (! defined $page || ! length $page ||
file_pruned($page)) {
error(gettext("bad page name"));
}
+ $page=possibly_foolish_untaint($page);
+ my $absolute=($page =~ s#^/+##); # absolute name used to force location
my $baseurl = urlto($page);
$form->title(sprintf(gettext("editing %s"), pagetitle(basename($page))));
}
- showform_preview($form, \@buttons, $session, $q, page => $page);
+ showform($form, \@buttons, $session, $q, page => $page);
}
else {
# save page
$form->field(name => "page", type => 'hidden');
$form->field(name => "type", type => 'hidden');
$form->title(sprintf(gettext("editing %s"), $page));
- showform_preview($form, \@buttons, $session, $q,
+ showform($form, \@buttons, $session, $q,
page => $page);
exit;
}
value => readfile("$config{srcdir}/$file").
"\n\n\n".$form->field("editcontent"),
force => 1);
- showform_preview($form, \@buttons, $session, $q,
+ showform($form, \@buttons, $session, $q,
page => $page);
exit;
}
$form->field(name => "page", type => 'hidden');
$form->field(name => "type", type => 'hidden');
$form->title(sprintf(gettext("editing %s"), $page));
- showform_preview($form, \@buttons, $session, $q,
+ showform($form, \@buttons, $session, $q,
page => $page);
exit;
}
$form->field(name => "page", type => 'hidden');
$form->field(name => "type", type => 'hidden');
$form->title(sprintf(gettext("editing %s"), $page));
- showform_preview($form, \@buttons, $session, $q,
+ showform($form, \@buttons, $session, $q,
page => $page);
}
else {