--

--	loona - tiny CMS

--	Written by Timm S. Mueller <tmueller at neoscientists.org>

--	See copyright notice in COPYRIGHT

--

local tek = require "tek"

local cgi = require "tek.cgi"

local posix = require "tek.posix"

require "tek.cgi.request"

require "tek.cgi.request.args"

require "tek.cgi.session"

require "tek.web"

require "tek.web.markup"

require "tek.util"

local boxed_G = { 

	string = string, table = table,

	assert = assert, collectgarbage = collectgarbage, dofile = dofile,

	error = error, getfenv = getfenv, getmetatable = getmetatable,

	ipairs = ipairs, load = load, loadfile = loadfile, loadstring = loadstring,

	next = next, pairs = pairs, pcall = pcall, print = print,

	rawequal = rawequal, rawget = rawget, rawset = rawset, require = require,

	select = select, setfenv = setfenv, setmetatable = setmetatable,

	tonumber = tonumber, tostring = tostring, type = type, unpack = unpack,

	xpcall = xpcall

}

local table, string, assert, unpack, ipairs, pairs, type, require =

	table, string, assert, unpack, ipairs, pairs, type, require

local setmetatable, setfenv, getfenv = setmetatable, setfenv, getfenv

local open, remove, rename, getenv, time, date =

	io.open, os.remove, os.rename, os.getenv, os.time, os.date

module "loona"

_VERSION = 3

_REVISION = 1

local function lookupname(tab, val)

	if tab then

		for i, v in ipairs(tab) do

			if v.name == val then

				return i

			end

		end

	end

end

local atom = { }

function atom:new(o)

	o = o or { }

	setmetatable(o, self)

	self.__index = self

	return o

end

local loona = atom:new(getfenv())

function loona:dbmsg(msg, detail)

 	return (msg and detail and self.authuser) and

 		("%s : %s"):format(msg, detail) or msg

end

function loona:checkprofilename(n)

	assert(n:match("^%w+$") and n ~= "current",

		self:dbmsg("Invalid profile name", n))

	return n

end

function loona:checkbodyname(s)

	s = s or "main"

	assert(s:match("^[%w_]*%w+[%w_]*$"), self:dbmsg("Invalid body name", s))

	return s

end

function loona:deleteprofile(p, lang)

	p = self.config.contentdir .. "/" .. p .. "_" .. (lang or self.lang)

	for e in tek.util.readdir(p) do

 		local success, msg = remove(p .. "/" .. e)

		assert(success, self:dbmsg("Error removing entry in profile", msg))

	end

	return remove(p)

end

function loona:copyprofile(newprofile, srcprofile, lang)

	srcprofile = srcprofile or self.profile

	lang = lang or self.lang

	local contentdir = self.config.contentdir

	local src = ("%s/%s_%s"):format(contentdir, srcprofile or self.profile, 

		lang)

	assert(posix.stat(src, "mode") == "directory",

		self:dbmsg("Not a directory", src))

	local dst = ("%s/%s_%s"):format(contentdir, newprofile, lang)

	local success, msg = posix.mkdir(dst)

	assert(success, self:dbmsg("Error creating profile directory", msg))

	for e in tek.util.readdir(src) do

		local ext = e:match("^[^.].*%.([^.]*)$")

		if ext ~= "LOCK" then

			local f = src .. "/" .. e

			if posix.stat(f, "mode") == "file" then

				success, msg = tek.copyfile(f, dst .. "/" .. e)

				assert(success, self:dbmsg("Error copying file", msg))

			end

		end

	end

end

function loona:publishprofile(profile, lang)

	lang = lang or self.lang

	local contentdir = self.config.contentdir

	local newpath = ("%s/current_%s"):format(contentdir, lang)

	local tmppath = newpath .. "." .. self.session.name

	local success, msg = posix.symlink(profile .. "_" .. lang, tmppath)

	assert(success, self:dbmsg("Cannot create symlink", msg))

	success, msg = rename(tmppath, newpath)

	assert(success, self:dbmsg("Cannot put symlink in place", msg))

	-- Get languages in the current profile

	local plangs = { }

	local lmatch = "^" .. self.profile .. "_(%w+)$"

	for e in tek.util.readdir(self.config.contentdir) do

		local l = e:match(lmatch)

		if l then

			table.insert(plangs, l)

		end

	end

	-- For all languages, unroll site to static HTML

	for _, lang in ipairs(plangs) do

		local ext = (#plangs == 1 and ".html") or (".html." .. lang)

		self:recursesections(self.sections, function(self, s, e, path)

			path = path and path .. "/" .. e.name or e.name

			if not e.notvisible then

				loona:dumphtml { requestpath = path, requestlang = lang,

					htmlext = ext, insecure = true }

			end

			return path

		end)

	end

	-- Update file cache

	local htdocs = self.config.htdocsdir

	local cache = self.config.htmlcachedir

	for e in tek.util.readdir(cache) do

		local f = e:match("^.*%.html%.?(%w*)$")

		if f and f ~= "tmp" then

			local success, msg = remove(htdocs .. "/" .. e)

			success, msg = remove(cache .. "/" .. e)

 			assert(success,

 				self:dbmsg("Could not purge cached HTML file", msg))

		end

	end

	for e in tek.util.readdir(cache) do

		local f = e:match("^(.*%.html%.?%w*)%.tmp$")

		if f then

			local success, msg = rename(cache .. "/" .. e, cache .. "/" .. f)

			assert(success,

				self:dbmsg("Could not update cached HTML file", msg))

			success, msg = rename(htdocs .. "/" .. e, htdocs .. "/" .. f)

			assert(success,

				self:dbmsg("Could not update cached HTML file", msg))

		end

	end

end

function loona:recursesections(s, func, ...)

	for _, e in ipairs(s) do

		local udata = { func(self, s, e, unpack(arg)) }

		if e.subs then

			self:recursesections(e.subs, func, unpack(udata))

		end

	end

end

function loona:indexsections()

	self:recursesections(self.sections, function(self, s, e)

		e.notvalid = (not self.secure and e.secure) or 

			(not self.authuser and e.secret) or nil

		e.notvisible = e.notvalid or not self.authuser and e.hidden or nil

		s[e.name] = e

	end)

end

--	Decompose section path into a stack of sections, returning only up to

--	the last valid element in the path. additionally returns the table of

--	the last section path element (or the default section)

function loona:getsection(path)

	local default = not self.authuser and self.config.defname

	local tab = { { entries = self.sections, name = default } }

	local ss = self.sections

	local sectionpath

	(path or ""):gsub("(%w+)/?", function(a)

		if ss then

			local s = ss[a]

			if s and not s.notvalid then

				sectionpath = s

				tab[#tab].name = a

				ss = s.subs

				if ss then

					table.insert(tab, { entries = ss })

				end

			else

				ss = nil -- stop.

			end

		end

	end)

	if not self.section and not sectionpath then

		sectionpath = self.sections[default]

		if sectionpath then

			table.insert(tab, { entries = sectionpath.subs })

		end

	end

	return tab, sectionpath

end

function loona:getpath(delimiter)

	local t = { }

	for _, menu in ipairs(self.submenus) do

		if menu.name then

			table.insert(t, menu.name)

		end

	end

	return table.concat(t, delimiter or "/")

end

function loona:deletesection(fname, all_bodies)

	local fullname = self.contentdir .. "/" .. fname

	local success, msg = remove(fullname)

	if all_bodies then

		local pat = "^" .. 

			fname:gsub("%^%$%(%)%%%.%[%]%*%+%-%?", "%%%1") .. "%..*$"

		for e in tek.util.readdir(self.contentdir) do

			if e:match(pat) then

				remove(self.contentdir .. "/" .. e)

			end

		end

	end

	return success, msg

end

function loona:addpath(path, e)

	local tab = self.sections

	path:gsub("(%w+)/?", function(a)

		if tab then

			local s = tab[a]

			if s then

				if not s.subs then

					s.subs = { }

				end

				tab = s.subs

			else

				table.insert(tab, e)

				tab[a] = e

 				tab = nil -- stop

			end

		end

	end)

	return e

end

function loona:rmpath(path)

	local parent

	local tab = self.sections

	path:gsub("(%w+)/?", function(a)

		if tab then

			local idx = lookupname(tab, a)

			if idx then

				if tab[idx].subs then

					parent = tab[idx]

					tab = tab[idx].subs

				else

					table.remove(tab, idx)

					tab[a] = nil

					if #tab == 0 and parent then

						parent.subs = nil

					end

					tab = nil

				end

			end

		end

	end)

end

function loona:checkpath(path)

	if path ~= "index" then -- "index" is reserved

		local res, idx

		local tab = self.sections

		path:gsub("(%w+)/?", function(a)

			if tab then

				local i = lookupname(tab, a)

				if i then

					res, idx = tab, i

					tab = tab[i].subs

				else

					res, idx = nil, nil

				end

			end

		end)

		return res, idx

	end

end

function loona:title()

	return self.section and (self.section.title or self.section.label or

		self.section.name) or ""

end

--	Run a site function snippet, with full error recovery

--	(also recovers from errors in error handling function)

function loona:dosnippet(func, errfunc)

	local ret = { tek.catch(func) }

	if ret[1] == 0 or (errfunc and tek.catch(errfunc) == 0) then

		return unpack(ret)

	end

	self:out("<h2>Error</h2>")

	self:out("<h3>" .. self:encodeform(ret[2] or "") .. "</h3>")

	if self.authuser then

		if type(ret[3]) == "string" then

			self:out("<p>" .. self:encodeform(ret[3]) .. "</p>")

		end

		if ret[4] then

			self:out("<pre>" .. self:encodeform(ret[4]) .. "</pre>")

		end

	end

end	

function loona:lockfile(file)

	return not self.session and true or 

		posix.symlink(self.session.filename, file .. ".LOCK")

end

function loona:unlockfile(file)

	return not self.session and true or remove(file .. ".LOCK")

end

function loona:saveindex()

	local tempname = self.indexfname .. "." .. self.session.name

	local f, msg = open(tempname, "wb")

	assert(f, self:dbmsg("Error opening section file for writing", msg))

	tek.dump(self.sections, function(...)

		f:write(unpack(arg))

	end)

	f:close()

	local success, msg = rename(tempname, self.indexfname)

	assert(success, self:dbmsg("Error renaming section file", msg))

end

function loona:savebody(fname, content)

	fname = self.contentdir .. "/" .. fname

	local f, msg = open(fname, "wb")

	assert(f, self:dbmsg("Could not open file for writing", msg))

	f:write(content or "")

	f:close()

end

function loona:runboxed(func, envitems, ...)

	local fenv = {

 		arg = arg,

 		loona = self

 	}

 	if envitems then

	 	for k, v in pairs(envitems) do

 			fenv[k] = v

 		end

 	end

 	setmetatable(fenv, { __index = boxed_G }) -- boxed global environment

	setfenv(func, fenv)

	return func()

end

function loona:include(fname, ...)

	assert(not fname:match("%W"), self:dbmsg("Invalid include name", fname))

	local fname2 = ("%s/%s.lua"):format(self.config.extdir, fname)

	local f, msg = open(fname2)

	assert(f, self:dbmsg("Cannot open file", msg))

	local parsed, msg = self:loadhtml(f, "loona:out", fname2)

	assert(parsed, self:dbmsg("Syntax error", msg))

	return self:runboxed(parsed, nil, unpack(arg))

end

--	produce link target, propagate lang, profile, session

function loona:href(section, ...)

	local target = self:getdocname(section)

	if self.session then

		return tek.web.gethref(target, { "profile", "session", "lang", 

			unpack(arg) })

	end

	return tek.web.gethref(target, { "lang", unpack(arg) })

end

function loona:ilink(target, text, extra)

	return ('<a href="%s"%s>%s</a>'):format(target, extra or "", text)

end

--	internal link, propagation of lang, profile, session

function loona:link(section, text, ...)

	return self:ilink(self:href(section, unpack(arg)), text or section)

end

--	external link (opens in a new window), no argument propagation

function loona:elink(target, text)

	return self:ilink(target, text or target,

		not self.config.extlinksamewindow and

		' class="extlink" onclick="void(window.open(this.href, \'\', \'\')); return false;"')

end

--	plain link, no argument propagation

function loona:plink(section, text, ...)

	return self:ilink(tek.web.gethref(section, arg), text or section)

end

--	user interface link, propagation of lang, profile, session

function loona:uilink(section, text, ...)

	return self:ilink(self:href(section, unpack(arg)), text or section)

end

--	produce a hidden input value in forms

function loona:hidden(name, value)

	return not value and "" or

		('<input type="hidden" name="%s" value="%s" />'):format(name, value)

end

function loona:getprofiles(lang)

	lang = lang or self.lang

	local dir = self.config.contentdir

	local t = { }

	for f in tek.util.readdir(dir) do

		if posix.lstat(dir .. "/" .. f, "mode") == "directory" then

			local e = f:match("^(%w+)_" .. lang .. "$")

 			if e then

	 			t[e] = e

 	 		end

		end

	end

	return t

end

--	Functions to produce a hierarchical navigation menu

local newent = { name = "new", label = "[+]", action="actionnew=true" }

function loona:rmenu(level, linkf, path, addnew)

	local sub = (addnew and level == #self.submenus + 1) and

		{ name = "new", entries = { }} or self.submenus[level]

 	if sub and sub.entries then

		local visible = { }

		for _, e in ipairs(sub.entries) do

			if not e.notvisible then

				table.insert(visible, e)

			end

		end

		if addnew then

			table.insert(visible, newent)

		end

		if #visible > 0 then

			self:out('<ul id="menulevel' .. level .. '">\n')

			for _, e in ipairs(visible) do

				local label = self:encodeform(e.label or e.name)

				local newpath = path and path .. "/" .. e.name or e.name

				local active = (e.name == sub.name)

				self:out('<li>\n')

				linkf(self, newpath, label, active, e.action)

				if active then

					self:rmenu(level + 1, linkf, newpath, addnew)

				end

				self:out('</li>\n')

			end

			self:out('</ul>\n')

		end

	end

end

function loona:menulink(path, label, active, ...)

	self:out(('<a %shref="%s">%s</a>\n'):format(active and 

		'class="active" ' or "", self:href(path, unpack(arg)), label))

end

function loona:menu(level, linkf)

	local addnew = self.authuser and not self.ispubprofile

	self:rmenu(level or 1, linkf or menulink, nil, addnew)

end

function loona:loadcontent(fname)

	if fname then

		local f = open(self.contentdir .. "/" .. fname)

		local c = f:read("*a")

		f:close()

		return c

	end

	return ""

end

function loona:loadmarkup(fname)

	return (fname and fname ~= "") and

		self:domarkup(self:loadcontent(fname)) or ""

end

function loona:editable(editkey, fname, savename)

	local contentdir = self.contentdir

	local edit, show, hidden, extramsg, changed

	if self.authuser then

		local hiddenvars = table.concat( {

			self:hidden("lang", self.args.lang),

			self:hidden("profile", self.profile),

			self:hidden("session", self.session.id),

			self:hidden("editkey", editkey) }, " ")

		local lockfname = fname and (contentdir .. "/" .. fname)

		if self.useralert and editkey == self.args.editkey then

			--	display user alert/request/confirmation

			hidden = true

			self:out([[

			<form action="]] .. self.document .. [[" method="post" accept-charset="utf-8">

				<fieldset>

					<legend>]] .. self.useralert.text ..[[</legend>

					]] .. (self.useralert.confirm or "") .. [[

					<input type="submit" name="actioncancel" value="]] .. self.locale.CANCEL  ..[[" />

					]] .. hiddenvars .. [[

				</fieldset>

			</form>

			]])

		elseif self.args.actionnew and editkey == "main" then

			--	form for creating a new section

			hidden = true

			if self.ispubprofile then

				self:out([[<h2><span class="warn">]] .. self.locale.WARNING_YOU_ARE_IN_PUBLISHED_PROFILE ..[[</span></h2>]])

			end

			self:out([[

			<form action="]] .. self.document .. [[" method="post" accept-charset="utf-8">

				<fieldset>

					<legend>

						]] .. self.locale.CREATE_NEW_SECTION_UNDER .. " " .. self.sectionpath .. [[

					</legend>

					<table>

						<tr>

							<td align="right">

								]] .. self.locale.PATHNAME .. [[

							</td>

							<td>

								<input size="30" maxlength="30" name="editname" />

							</td>

						</tr>

						<tr>

							<td align="right">

								]] .. self.locale.MENULABEL .. [[

							</td>

							<td>

								<input size="30" maxlength="50" name="editlabel" />

							</td>

						</tr>

						<tr>

							<td align="right">

								]] .. self.locale.WINDOWTITLE .. [[

							</td>

							<td>

								<input size="30" maxlength="50" name="edittitle" />

							</td>

						</tr>

						<tr>

							<td align="right">

								]] .. self.locale.INVISIBLE .. [[

							</td>

							<td>

								<input type="checkbox" name="editvisibility" />

							</td>

						</tr>

						<tr>

							<td align="right">

								]] .. self.locale.SECRET .. [[

							</td>

							<td>

								<input type="checkbox" name="editsecrecy" />

							</td>

						</tr>

						<tr>

							<td align="right">

								]] .. self.locale.SECURE_CONNECTION .. [[

							</td>

							<td>

								<input type="checkbox" name="editsecure" />

							</td>

						</tr>

						<tr>

							<td align="right">

								]] .. self.locale.REDIRECT .. [[

							</td>

							<td>

								<input size="30" maxlength="50" name="editredirect" />

							</td>

						</tr>

					</table>					

					<input type="submit" name="actioncreate" value="]] .. self.locale.CREATE .. [[" />

					]] .. hiddenvars .. [[

				</fieldset>

			</form>

			<hr />

			]])

		elseif self.args.actioneditprops and editkey == "main" then

			hidden = true

			if self.ispubprofile then

				self:out([[<h2><span class="warn">]] .. self.locale.WARNING_YOU_ARE_IN_PUBLISHED_PROFILE ..[[</span></h2>]])

			end

			self:out([[

			<form action="]] ..self.document .. [[" method="post" accept-charset="utf-8">

				<fieldset>

					<legend>

						]] .. self.locale.MODIFY_PROPERTIES_OF_SECTION .. " " .. self.sectionpath .. [[

					</legend>

					<table>

						<tr>

							<td align="right">

								]] .. self.locale.MENULABEL .. [[

							</td>

							<td>

								<input size="30" maxlength="50" name="editlabel" value="]] .. (self.section.label or "") .. [[" />

							</td>

						</tr>

						<tr>

							<td align="right">

								]] .. self.locale.WINDOWTITLE .. [[

							</td>

							<td>

								<input size="30" maxlength="50" name="edittitle" value="]] .. (self.section.title or "") .. [[" />

							</td>

						</tr>

						<tr>

							<td align="right">

								]] .. self.locale.INVISIBLE .. [[

							</td>

							<td>

								<input type="checkbox" name="editvisibility" ]] .. (self.section.hidden and 'checked="checked"' or "") .. [[/>

							</td>

						</tr>

						<tr>

							<td align="right">

								]] .. self.locale.SECRET .. [[

							</td>

							<td>

								<input type="checkbox" name="editsecrecy" ]] .. (self.section.secret and 'checked="checked"' or "") .. [[/>

							</td>

						</tr>

						<tr>

							<td align="right">

								]] .. self.locale.SECURE_CONNECTION .. [[

							</td>

							<td>

								<input type="checkbox" name="editsecure" ]] .. (self.section.secure and 'checked="checked"' or "") .. [[/>

							</td>

						</tr>

						<tr>

							<td align="right">

								]] .. self.locale.REDIRECT .. [[

							</td>

							<td>

								<input size="30" maxlength="50" name="editredirect" value="]] .. (self.section.redirect or "") .. [[" />

							</td>

						</tr>

					</table>

					<input type="submit" name="actionsaveprops" value="]] .. self.locale.SAVE .. [[" />

					<input type="submit" name="actioncancel" value="]] .. self.locale.CANCEL .. [[" />

					]] .. hiddenvars .. [[

				</fieldset>

			</form>

			]])

		elseif (self.args.actioneditprofiles or

			self.args.actioncreateprofile or 

			self.args.actionchangeprofile or 

			self.args.actionpublishprofile) and editkey == "main" then

			hidden = true

			local profiles = { }

			for p in pairs(self:getprofiles()) do

				table.insert(profiles, p)

			end

			table.sort(profiles)

			self:out([[

			<form action="]] .. self.document .. [[" method="post" accept-charset="utf-8">

				<fieldset>

					<legend>

						]] .. self.locale.CHANGEPROFILE .. [[

					</legend>

					<select name="changeprofile" size="1">]])

						for _, val in ipairs(profiles) do

							self:out('<option' .. (val == self.profile and ' selected="selected"' or '') .. '>')

							self:out(val)

							self:out('</option>')

						end

					self:out([[

					</select>							

					<input type="submit" name="actionchangeprofile" value="]] .. self.locale.CHANGE ..[[" />

					]] .. hiddenvars .. [[

				</fieldset>

			</form>

			<form action="]] .. self.document ..[[" method="post" accept-charset="utf-8">

				<fieldset>

					<legend>

						]] .. self.locale.CREATEPROFILE .. [[

					</legend>

					<input size="20" maxlength="20" name="createprofile" />

					<input type="submit" name="actioncreateprofile" value="]] .. self.locale.CREATE .. [[" />

					]] .. hiddenvars .. [[

				</fieldset>

			</form>

			]])

			if not self.ispubprofile then

				self:out([[

				<form action="]] .. self.document .. [[" method="post" accept-charset="utf-8">

					<fieldset>

						<legend>

							]] .. self.locale.PUBLISHPROFILE .. [[

						</legend>

						]] .. self:hidden("publishprofile", self.profile) .. [[

						<input type="submit" name="actionpublishprofile" value="]] .. self.locale.PUBLISH .. [[" />

						]] .. hiddenvars .. [[

					</fieldset>

				</form>

				<form action="]] .. self.document .. [[" method="post" accept-charset="utf-8">

					<fieldset>

						<legend>

							]] .. self.locale.DELETEPROFILE .. [[

						</legend>

						]] .. self:hidden("deleteprofile", self.profile) .. [[

						<input type="submit" name="actiondeleteprofile" value="]] .. self.locale.DELETE .. [[" />

						]] .. hiddenvars .. [[

					</fieldset>

				</form>

				]])

			end

		elseif self.args.actionedit and editkey == self.args.editkey then

			if not self.section.redirect then

				extramsg = self.ispubprofile and

					self.locale.WARNING_YOU_ARE_IN_PUBLISHED_PROFILE

				edit = self:loadcontent(fname):gsub("\194\160", " ") -- TODO

				changed = self.section and (self.section.revisiondate or self.section.creationdate)

			end

		elseif self.args.actionpreview and editkey == self.args.editkey then

			edit = self.args.editform

			show = self:domarkup(edit:gsub(" ", "\194\160")) -- TODO

		elseif self.args.actionsave and editkey == self.args.editkey then

			local c = self.args.editform

			local dynamic

			if lockfname then

				self:expire(contentdir, "[^.]%S+.LOCK")

				if self:lockfile(lockfname) then

					-- lock was expired, aquired a new one

					extramsg = self.locale.SECTION_COULD_HAVE_CHANGED

					edit = c

				else

					local tab = tek.source(lockfname .. ".LOCK")

					if tab and tab.id == self.session.id then

						-- lock already held and is mine - try to save:

						local savec = c:gsub(" ", "\194\160") -- TODO

						remove(contentdir .. "/" .. savename .. ".html")

						self:savebody(savename, savec)

						-- TODO: error handling

						self:unlockfile(lockfname)

						show, dynamic = self:domarkup(savec)

						changed = time()

					else

						-- lock was expired and someone else has it now

						extramsg = self.locale.SECTION_IN_USE

						edit = c

					end

				end

			else

				-- new sidefile

				local savec = c:gsub(" ", "\194\160") -- TODO

				self:savebody(savename, savec)

				-- TODO: error handling

				show, dynamic = self:domarkup(savec)

			end

			-- mark dynamic text bodies

			if not self.section.dynamic then

				self.section.dynamic = { }

			end

			self.section.dynamic[editkey] = dynamic

			local n = 0

			for _ in pairs(self.section.dynamic) do

				n = n + 1

			end

			if n == 0 then

				self.section.dynamic = nil

			end

			self:saveindex()

		elseif self.args.actioncancel and editkey == self.args.editkey then

			if lockfname then

				self:unlockfile(lockfname) -- remove lock

			end

		end

		if editkey == "main" and self.section and self.section.redirect then

			self:out('<h2>' .. self.locale.SECTION_IS_REDIRECT ..'</h2>')

			self:out(self:link(self.section.redirect))

			self:out('<hr />')

		end

		if edit then

			self:expire(contentdir, "[^.]%S+.LOCK")

			if fname and not self:lockfile(contentdir .. "/" .. fname) then

				local tab = tek.source(contentdir .. "/" .. fname .. ".LOCK")

				if tab and tab.id ~= self.session.id then

					extramsg = self.locale.SECTION_IN_USE

				end

				-- else already owner

			end

			if extramsg then

				self:out('<h2><span class="warn">' .. extramsg .. '</span></h2>')

			end

			self:out([[

			<form action="]] .. self.document .. [[#preview" method="post" accept-charset="utf-8">

				<fieldset>

					<legend>

						]] .. self.locale.EDIT_SECTION .. [[

					</legend>

					<textarea cols="80" rows="25" name="editform">]] .. self:encodeform(edit) .. [[</textarea>

					<br />

					<input type="submit" name="actionsave" value="]] .. self.locale.SAVE .. [[" />

					<input type="submit" name="actionpreview" value="]] .. self.locale.PREVIEW .. [[" />

					<input type="submit" name="actioncancel" value="]] .. self.locale.CANCEL .. [[" />

					]] .. hiddenvars .. [[

				</fieldset>

			</form>

			]])

		end

	end	

	if not hidden then

		self:dosnippet(function()

			if not show then

				show = self:loadmarkup(fname)

				changed = self.section and (self.section.revisiondate or self.section.creationdate)

			end

			local parsed, msg = self:loadhtml(show, "loona:out", "<parsed html>")

			assert(parsed, msg and "Syntax error : " .. msg)

			self:runboxed(parsed)

		end)

	end

	if self.authuser then

		self:out([[

		<hr />

		<div class="edit">]])

			if editkey == "main" then

				self:out([[

				<a name="preview"></a>

				]] .. self.authuser .. [[ : 

				]] .. self:uilink(self.sectionpath, "[" .. self.locale.PROFILE .. "]", "actioneditprofiles=true", "editkey=" .. editkey) .. [[ :

				]] .. self.profile .. "_" .. self.lang)

				if self.ispubprofile then

					self:out([[

						<span class="warn">[]] .. self.locale.PUBLIC .. [[]</span>]])

				end

				self:out(' : ' .. self.sectionpath .. ' ')

			end

			if self.section and not self.ispubprofile then

				self:out(self:uilink(self.sectionpath, "[" .. self.locale.EDIT .. "]", "actionedit=true", "editkey=" .. editkey) .. " ")

				if editkey == "main" then

					self:out('- ' .. self:uilink(self.sectionpath, "[" .. self.locale.PROPERTIES .. "]", "actioneditprops=true", "editkey=" .. editkey) .. " ")

				end

				if fname == savename or not self.section.subs then

					self:out('- ' .. self:uilink(self.sectionpath, "[" .. self.locale.DELETE .. "]", "actiondelete=true", "editkey=" .. editkey) .. " ")

				end

				if editkey == "main" then

					self:out('- ' .. self:uilink(self.sectionpath, "[" .. self.locale.MOVEUP .. "]", "actionup=true", "editkey=" .. editkey) .. " ")

					self:out('- ' .. self:uilink(self.sectionpath, "[" .. self.locale.MOVEDOWN .. "]", "actiondown=true", "editkey=" .. editkey) .. " ")

				end

				if changed and editkey == "main" then

					self:out('- ' .. self.locale.CHANGED .. ': ' .. date("%d-%b-%Y %T", changed))

				end

			end

		self:out('</div>')

	end

end

--	Get pathname of an existing content file that

--	the current path is determined by (or defaults to)

function loona:getsectionpath(bodyname, requestpath)

	local ext = (not bodyname or bodyname == "main") and "" or "." .. bodyname

	local t, path, section = { }

	for _, menu in ipairs(self.submenus) do

		if menu.entries and menu.entries[menu.name] then

			table.insert(t, menu.name)

			local fn = table.concat(t, "_")

			if posix.stat(self.contentdir .. "/" .. fn .. ext, 

				"mode") == "file" then

				path, section = fn, menu

			end

		end

	end

	return path, ext, section

end

function loona:body(name)

	name = self:checkbodyname(name)

	local path, ext = self:getsectionpath(name)

	self:dosnippet(function()

		self:editable(name, path and path .. ext, self.sectionname .. ext)

	end)

end

function loona:init()

	-- get list of languages, in order of preference

	-- TODO: respect quality parameter, not just order

	local l = self.requestlang or self.args.lang

	self.langs = { l and l:match("^%w+$") }

	if self.config.browserlang then

		local s = getenv("HTTP_ACCEPT_LANGUAGE")

		while s do

			local l, r = s:match("^([%w.=]+)[,;](.*)$")

			l = l or s