WikiNetwork |
PmWiki /
authors (intermediate)
This page describes the "variables" that are associated with pages. Page variables have the form Note: Do not confuse these variables (set and used only in PmWiki pages) with PHP variables. Page variables can be read in PHP with the PageVar() function. Note that these variables do not necessarily exist in the PHP code, because they have to be determined for a specific page. (However, they are usable in FmtPageName strings.) There is also the form Special referencesSpecial referenced variables are used to specify the context of the variable when:
Prefixing the variable name with an asterisk (*) means the variable's value is related to the target page or main (body) page.
Without the asterisk the variable's value is that in the page from which it originates, eg source page of include, sidebar, or header or footer.
See also $EnableRelativePageVars .
Special references are also used in page text variables and page list templates.
For example you can test to see if the page is part of another page
or refer to the main page in a sidebar, footer, or header
Default page variablesThe page variables defined for PmWiki are: {$Action} - page's url action argument, as in "browse"
{$BaseName} - page's "base" form (stripping any prefixes or suffixes defined via ) as in "PmWiki.PageVariables"
{$DefaultGroup} - default group name, as in "Main"
{$DefaultName} - name of default page, as in "HomePage"
{$Description} - page's description from the (:description:) markup, as in "Documentation for "variables" that are associated with pages."
{$FullName} - page's full name, as in "PmWiki.PageVariables"
{$Group} - page's group name, as in "PmWiki"
{$Groupspaced} - spaced group name, as in "Pm Wiki"
{$LastModified} - date page was edited, as in "November 10, 2014, at 07:16 AM"
{$LastModifiedBy} - page's last editor, as in "Petko"
{$LastModifiedHost} - IP of page's last editor, as in ""
{$LastModifiedSummary} - Summary from last edit, as in "$FmtPV ['$Var'] = $_REQUEST['Var']; # critically insecure"
{$LastModifiedTime} - time page was edited in unix-style timestamp, as in "1415603781"
This can be used (preceded by '@') in {(ftime)} and other date/time markups.
{$Name} - page name, as in "PageVariables"
{$Namespaced} - spaced page name, as in "Page Variables"
{$PageUrl} - page's url, as in "https://wiki.transadvice.org?n=PmWiki.PageVariables"
{$PasswdRead} - "read" permissions for the page e.g. "(protected)"
{$PasswdEdit} - "edit" permissions for the page e.g. "(protected)"
{$PasswdAttr} - "attr" permissions for the page e.g. "(protected)"
{$SiteGroup} - default group name for e.g. RecentChanges?, as in "Site"
{$Title} - page title (may differ from Name), as in "Page specific variables"
{$Titlespaced} - either the page title (if defined), or the spaced page name, as in "Page specific variables"
In addition to the above, there are some page-invariant variables available through this markup: {$Author} - the name of the person currently interacting with the site, as in ""
{$AuthId} - current authenticated id, as in "" note the lower case 'd'.
{$Version} - PmWiki version, as in "pmwiki-2.2.70"
{$VersionNum} - The internal version number, as in "2002070"
{$ScriptUrl} - The url to the pmwiki script, as in "https://wiki.transadvice.org"
Page variable security ($authpage)The form If the other pages are protected and the visitor has no read permissions, PageVariables, unlike PageTextVariables, normally display the values. While most variables do not contain sensitive information, some of them could do: $Title, $Description and those starting with $LastModified. Administrators and module developers can redefine the sensitive page variables to respect authentications, by using the "$authpage" variable instead of "$page" in the definition. The following snippet can be added in local/config.php -- it will rewrite the default possibly sensitive definitions to the secure ones. foreach($FmtPV as $k=>$v) { if(preg_match('/^\\$(Title(spaced)?|LastModified(By|Host|Summary|Time)?|Description)$/', $k)) $FmtPV[$k] = str_replace('$page', '$authpage', $v); } Custom page variablesYou may add custom page variables as a local customization. In a local configuration file or a recipe script, use the variable $FmtPV['$VarName'] = "'variable definition'"; $FmtPV['$CurrentSkin'] = '$GLOBALS["Skin"]'; $FmtPV['$WikiTitle'] = '$GLOBALS["WikiTitle"]'; Defines new Page Variable of name $CurrentSkin, which can be used in the page with Please note that the values of the elements of $FmtPV['$Var'] = $_REQUEST['Var']; # critically insecure, allows PHP code injection
You should sanitize the user input to contain only expected values, or make sure the value is a quoted string, for example: # we only expect numeric values of Var $FmtPV['$Var'] = intval($_REQUEST['Var']); # properly escaped quoted string. $FmtPV['$Var'] = '"'. addslashes($_REQUEST['Var']) . '"'; See also
Is there a variable like $LastModified, but which shows me the creation time? No, but you can create one in config.php. For instance: # add page variable {$PageCreationDate} in format yyyy-mm-dd $FmtPV['$PageCreationDate'] = 'strftime("%Y-%m-%d", $page["ctime"])'; If you like the same format that you define in config.php with $FmtPV['$Created'] = "strftime(\$GLOBALS['TimeFmt'], \$page['ctime'])"; How can I test if a variable is set and/or not empty? Use Categories: PmWiki Developer This page may have a more recent version on pmwiki.org: PmWiki:PageVariables, and a talk page: PmWiki:PageVariables-Talk. |