@@ -22,288 +22,288 @@ |
||
| 22 | 22 | */ |
| 23 | 23 | class RequestValidationHelper |
| 24 | 24 | { |
| 25 | - /** @var IBanHelper */ |
|
| 26 | - private $banHelper; |
|
| 27 | - /** @var Request */ |
|
| 28 | - private $request; |
|
| 29 | - private $emailConfirmation; |
|
| 30 | - /** @var PdoDatabase */ |
|
| 31 | - private $database; |
|
| 32 | - /** @var IAntiSpoofProvider */ |
|
| 33 | - private $antiSpoofProvider; |
|
| 34 | - /** @var IXffTrustProvider */ |
|
| 35 | - private $xffTrustProvider; |
|
| 36 | - /** @var HttpHelper */ |
|
| 37 | - private $httpHelper; |
|
| 38 | - /** |
|
| 39 | - * @var string |
|
| 40 | - */ |
|
| 41 | - private $mediawikiApiEndpoint; |
|
| 42 | - private $titleBlacklistEnabled; |
|
| 43 | - /** |
|
| 44 | - * @var TorExitProvider |
|
| 45 | - */ |
|
| 46 | - private $torExitProvider; |
|
| 47 | - |
|
| 48 | - /** |
|
| 49 | - * Summary of __construct |
|
| 50 | - * |
|
| 51 | - * @param IBanHelper $banHelper |
|
| 52 | - * @param Request $request |
|
| 53 | - * @param string $emailConfirmation |
|
| 54 | - * @param PdoDatabase $database |
|
| 55 | - * @param IAntiSpoofProvider $antiSpoofProvider |
|
| 56 | - * @param IXffTrustProvider $xffTrustProvider |
|
| 57 | - * @param HttpHelper $httpHelper |
|
| 58 | - * @param string $mediawikiApiEndpoint |
|
| 59 | - * @param boolean $titleBlacklistEnabled |
|
| 60 | - * @param TorExitProvider $torExitProvider |
|
| 61 | - */ |
|
| 62 | - public function __construct( |
|
| 63 | - IBanHelper $banHelper, |
|
| 64 | - Request $request, |
|
| 65 | - $emailConfirmation, |
|
| 66 | - PdoDatabase $database, |
|
| 67 | - IAntiSpoofProvider $antiSpoofProvider, |
|
| 68 | - IXffTrustProvider $xffTrustProvider, |
|
| 69 | - HttpHelper $httpHelper, |
|
| 70 | - $mediawikiApiEndpoint, |
|
| 71 | - $titleBlacklistEnabled, |
|
| 72 | - TorExitProvider $torExitProvider |
|
| 73 | - ) { |
|
| 74 | - $this->banHelper = $banHelper; |
|
| 75 | - $this->request = $request; |
|
| 76 | - $this->emailConfirmation = $emailConfirmation; |
|
| 77 | - $this->database = $database; |
|
| 78 | - $this->antiSpoofProvider = $antiSpoofProvider; |
|
| 79 | - $this->xffTrustProvider = $xffTrustProvider; |
|
| 80 | - $this->httpHelper = $httpHelper; |
|
| 81 | - $this->mediawikiApiEndpoint = $mediawikiApiEndpoint; |
|
| 82 | - $this->titleBlacklistEnabled = $titleBlacklistEnabled; |
|
| 83 | - $this->torExitProvider = $torExitProvider; |
|
| 84 | - } |
|
| 85 | - |
|
| 86 | - /** |
|
| 87 | - * Summary of validateName |
|
| 88 | - * @return ValidationError[] |
|
| 89 | - */ |
|
| 90 | - public function validateName() |
|
| 91 | - { |
|
| 92 | - $errorList = array(); |
|
| 93 | - |
|
| 94 | - // ERRORS |
|
| 95 | - // name is empty |
|
| 96 | - if (trim($this->request->getName()) == "") { |
|
| 97 | - $errorList[ValidationError::NAME_EMPTY] = new ValidationError(ValidationError::NAME_EMPTY); |
|
| 98 | - } |
|
| 99 | - |
|
| 100 | - // name is banned |
|
| 101 | - $ban = $this->banHelper->nameIsBanned($this->request->getName()); |
|
| 102 | - if ($ban != false) { |
|
| 103 | - $errorList[ValidationError::BANNED] = new ValidationError(ValidationError::BANNED); |
|
| 104 | - } |
|
| 105 | - |
|
| 106 | - // username already exists |
|
| 107 | - if ($this->userExists()) { |
|
| 108 | - $errorList[ValidationError::NAME_EXISTS] = new ValidationError(ValidationError::NAME_EXISTS); |
|
| 109 | - } |
|
| 110 | - |
|
| 111 | - // username part of SUL account |
|
| 112 | - if ($this->userSulExists()) { |
|
| 113 | - // using same error slot as name exists - it's the same sort of error, and we probably only want to show one. |
|
| 114 | - $errorList[ValidationError::NAME_EXISTS] = new ValidationError(ValidationError::NAME_EXISTS_SUL); |
|
| 115 | - } |
|
| 116 | - |
|
| 117 | - // username is numbers |
|
| 118 | - if (preg_match("/^[0-9]+$/", $this->request->getName()) === 1) { |
|
| 119 | - $errorList[ValidationError::NAME_NUMONLY] = new ValidationError(ValidationError::NAME_NUMONLY); |
|
| 120 | - } |
|
| 121 | - |
|
| 122 | - // username can't contain #@/<>[]|{} |
|
| 123 | - if (preg_match("/[" . preg_quote("#@/<>[]|{}", "/") . "]/", $this->request->getName()) === 1) { |
|
| 124 | - $errorList[ValidationError::NAME_INVALIDCHAR] = new ValidationError(ValidationError::NAME_INVALIDCHAR); |
|
| 125 | - } |
|
| 126 | - |
|
| 127 | - // existing non-closed request for this name |
|
| 128 | - if ($this->nameRequestExists()) { |
|
| 129 | - $errorList[ValidationError::OPEN_REQUEST_NAME] = new ValidationError(ValidationError::OPEN_REQUEST_NAME); |
|
| 130 | - } |
|
| 131 | - |
|
| 132 | - return $errorList; |
|
| 133 | - } |
|
| 134 | - |
|
| 135 | - /** |
|
| 136 | - * Summary of validateEmail |
|
| 137 | - * @return ValidationError[] |
|
| 138 | - */ |
|
| 139 | - public function validateEmail() |
|
| 140 | - { |
|
| 141 | - $errorList = array(); |
|
| 142 | - |
|
| 143 | - // ERRORS |
|
| 144 | - |
|
| 145 | - // Email is banned |
|
| 146 | - $ban = $this->banHelper->emailIsBanned($this->request->getEmail()); |
|
| 147 | - if ($ban != false) { |
|
| 148 | - $errorList[ValidationError::BANNED] = new ValidationError(ValidationError::BANNED); |
|
| 149 | - } |
|
| 150 | - |
|
| 151 | - // email addresses must match |
|
| 152 | - if ($this->request->getEmail() != $this->emailConfirmation) { |
|
| 153 | - $errorList[ValidationError::EMAIL_MISMATCH] = new ValidationError(ValidationError::EMAIL_MISMATCH); |
|
| 154 | - } |
|
| 155 | - |
|
| 156 | - // email address must be validly formed |
|
| 157 | - if (trim($this->request->getEmail()) == "") { |
|
| 158 | - $errorList[ValidationError::EMAIL_EMPTY] = new ValidationError(ValidationError::EMAIL_EMPTY); |
|
| 159 | - } |
|
| 160 | - |
|
| 161 | - // email address must be validly formed |
|
| 162 | - if (!filter_var($this->request->getEmail(), FILTER_VALIDATE_EMAIL)) { |
|
| 163 | - if (trim($this->request->getEmail()) != "") { |
|
| 164 | - $errorList[ValidationError::EMAIL_INVALID] = new ValidationError(ValidationError::EMAIL_INVALID); |
|
| 165 | - } |
|
| 166 | - } |
|
| 167 | - |
|
| 168 | - // email address can't be wikimedia/wikipedia .com/org |
|
| 169 | - if (preg_match('/.*@.*wiki(m.dia|p.dia)\.(org|com)/i', $this->request->getEmail()) === 1) { |
|
| 170 | - $errorList[ValidationError::EMAIL_WIKIMEDIA] = new ValidationError(ValidationError::EMAIL_WIKIMEDIA); |
|
| 171 | - } |
|
| 172 | - |
|
| 173 | - // WARNINGS |
|
| 174 | - |
|
| 175 | - return $errorList; |
|
| 176 | - } |
|
| 177 | - |
|
| 178 | - /** |
|
| 179 | - * Summary of validateOther |
|
| 180 | - * @return ValidationError[] |
|
| 181 | - */ |
|
| 182 | - public function validateOther() |
|
| 183 | - { |
|
| 184 | - $errorList = array(); |
|
| 185 | - |
|
| 186 | - $trustedIp = $this->xffTrustProvider->getTrustedClientIp($this->request->getIp(), |
|
| 187 | - $this->request->getForwardedIp()); |
|
| 188 | - |
|
| 189 | - // ERRORS |
|
| 190 | - |
|
| 191 | - // TOR nodes |
|
| 192 | - if ($this->torExitProvider->isTorExit($trustedIp)) { |
|
| 193 | - $errorList[ValidationError::BANNED] = new ValidationError(ValidationError::BANNED_TOR); |
|
| 194 | - } |
|
| 195 | - |
|
| 196 | - // IP banned |
|
| 197 | - $ban = $this->banHelper->ipIsBanned($trustedIp); |
|
| 198 | - if ($ban != false) { |
|
| 199 | - $errorList[ValidationError::BANNED] = new ValidationError(ValidationError::BANNED); |
|
| 200 | - } |
|
| 201 | - |
|
| 202 | - // WARNINGS |
|
| 203 | - |
|
| 204 | - // Antispoof check |
|
| 205 | - $this->checkAntiSpoof(); |
|
| 206 | - |
|
| 207 | - // Blacklist check |
|
| 208 | - $this->checkTitleBlacklist(); |
|
| 209 | - |
|
| 210 | - return $errorList; |
|
| 211 | - } |
|
| 212 | - |
|
| 213 | - private function checkAntiSpoof() |
|
| 214 | - { |
|
| 215 | - try { |
|
| 216 | - if (count($this->antiSpoofProvider->getSpoofs($this->request->getName())) > 0) { |
|
| 217 | - // If there were spoofs an Admin should handle the request. |
|
| 218 | - $this->request->setStatus("Flagged users"); |
|
| 219 | - } |
|
| 220 | - } |
|
| 221 | - catch (Exception $ex) { |
|
| 222 | - // logme |
|
| 223 | - } |
|
| 224 | - } |
|
| 225 | - |
|
| 226 | - private function checkTitleBlacklist() |
|
| 227 | - { |
|
| 228 | - if ($this->titleBlacklistEnabled == 1) { |
|
| 229 | - $apiResult = $this->httpHelper->get( |
|
| 230 | - $this->mediawikiApiEndpoint, |
|
| 231 | - array( |
|
| 232 | - 'action' => 'titleblacklist', |
|
| 233 | - 'tbtitle' => $this->request->getName(), |
|
| 234 | - 'tbaction' => 'new-account', |
|
| 235 | - 'tbnooverride' => true, |
|
| 236 | - 'format' => 'php', |
|
| 237 | - ) |
|
| 238 | - ); |
|
| 239 | - |
|
| 240 | - $data = unserialize($apiResult); |
|
| 241 | - |
|
| 242 | - $requestIsOk = $data['titleblacklist']['result'] == "ok"; |
|
| 243 | - |
|
| 244 | - if (!$requestIsOk) { |
|
| 245 | - $this->request->setStatus("Flagged users"); |
|
| 246 | - } |
|
| 247 | - } |
|
| 248 | - } |
|
| 249 | - |
|
| 250 | - private function userExists() |
|
| 251 | - { |
|
| 252 | - $userExists = $this->httpHelper->get( |
|
| 253 | - $this->mediawikiApiEndpoint, |
|
| 254 | - array( |
|
| 255 | - 'action' => 'query', |
|
| 256 | - 'list' => 'users', |
|
| 257 | - 'ususers' => $this->request->getName(), |
|
| 258 | - 'format' => 'php', |
|
| 259 | - ) |
|
| 260 | - ); |
|
| 261 | - |
|
| 262 | - $ue = unserialize($userExists); |
|
| 263 | - if (!isset ($ue['query']['users']['0']['missing']) && isset ($ue['query']['users']['0']['userid'])) { |
|
| 264 | - return true; |
|
| 265 | - } |
|
| 266 | - |
|
| 267 | - return false; |
|
| 268 | - } |
|
| 269 | - |
|
| 270 | - private function userSulExists() |
|
| 271 | - { |
|
| 272 | - $requestName = $this->request->getName(); |
|
| 273 | - |
|
| 274 | - $userExists = $this->httpHelper->get( |
|
| 275 | - $this->mediawikiApiEndpoint, |
|
| 276 | - array( |
|
| 277 | - 'action' => 'query', |
|
| 278 | - 'meta' => 'globaluserinfo', |
|
| 279 | - 'guiuser' => $requestName, |
|
| 280 | - 'format' => 'php', |
|
| 281 | - ) |
|
| 282 | - ); |
|
| 283 | - |
|
| 284 | - $ue = unserialize($userExists); |
|
| 285 | - if (isset ($ue['query']['globaluserinfo']['id'])) { |
|
| 286 | - return true; |
|
| 287 | - } |
|
| 288 | - |
|
| 289 | - return false; |
|
| 290 | - } |
|
| 291 | - |
|
| 292 | - /** |
|
| 293 | - * Checks if a request with this name is currently open |
|
| 294 | - * |
|
| 295 | - * @return bool |
|
| 296 | - */ |
|
| 297 | - private function nameRequestExists() |
|
| 298 | - { |
|
| 299 | - $query = "SELECT COUNT(id) FROM request WHERE status != 'Closed' AND name = :name;"; |
|
| 300 | - $statement = $this->database->prepare($query); |
|
| 301 | - $statement->execute(array(':name' => $this->request->getName())); |
|
| 302 | - |
|
| 303 | - if (!$statement) { |
|
| 304 | - return false; |
|
| 305 | - } |
|
| 306 | - |
|
| 307 | - return $statement->fetchColumn() > 0; |
|
| 308 | - } |
|
| 25 | + /** @var IBanHelper */ |
|
| 26 | + private $banHelper; |
|
| 27 | + /** @var Request */ |
|
| 28 | + private $request; |
|
| 29 | + private $emailConfirmation; |
|
| 30 | + /** @var PdoDatabase */ |
|
| 31 | + private $database; |
|
| 32 | + /** @var IAntiSpoofProvider */ |
|
| 33 | + private $antiSpoofProvider; |
|
| 34 | + /** @var IXffTrustProvider */ |
|
| 35 | + private $xffTrustProvider; |
|
| 36 | + /** @var HttpHelper */ |
|
| 37 | + private $httpHelper; |
|
| 38 | + /** |
|
| 39 | + * @var string |
|
| 40 | + */ |
|
| 41 | + private $mediawikiApiEndpoint; |
|
| 42 | + private $titleBlacklistEnabled; |
|
| 43 | + /** |
|
| 44 | + * @var TorExitProvider |
|
| 45 | + */ |
|
| 46 | + private $torExitProvider; |
|
| 47 | + |
|
| 48 | + /** |
|
| 49 | + * Summary of __construct |
|
| 50 | + * |
|
| 51 | + * @param IBanHelper $banHelper |
|
| 52 | + * @param Request $request |
|
| 53 | + * @param string $emailConfirmation |
|
| 54 | + * @param PdoDatabase $database |
|
| 55 | + * @param IAntiSpoofProvider $antiSpoofProvider |
|
| 56 | + * @param IXffTrustProvider $xffTrustProvider |
|
| 57 | + * @param HttpHelper $httpHelper |
|
| 58 | + * @param string $mediawikiApiEndpoint |
|
| 59 | + * @param boolean $titleBlacklistEnabled |
|
| 60 | + * @param TorExitProvider $torExitProvider |
|
| 61 | + */ |
|
| 62 | + public function __construct( |
|
| 63 | + IBanHelper $banHelper, |
|
| 64 | + Request $request, |
|
| 65 | + $emailConfirmation, |
|
| 66 | + PdoDatabase $database, |
|
| 67 | + IAntiSpoofProvider $antiSpoofProvider, |
|
| 68 | + IXffTrustProvider $xffTrustProvider, |
|
| 69 | + HttpHelper $httpHelper, |
|
| 70 | + $mediawikiApiEndpoint, |
|
| 71 | + $titleBlacklistEnabled, |
|
| 72 | + TorExitProvider $torExitProvider |
|
| 73 | + ) { |
|
| 74 | + $this->banHelper = $banHelper; |
|
| 75 | + $this->request = $request; |
|
| 76 | + $this->emailConfirmation = $emailConfirmation; |
|
| 77 | + $this->database = $database; |
|
| 78 | + $this->antiSpoofProvider = $antiSpoofProvider; |
|
| 79 | + $this->xffTrustProvider = $xffTrustProvider; |
|
| 80 | + $this->httpHelper = $httpHelper; |
|
| 81 | + $this->mediawikiApiEndpoint = $mediawikiApiEndpoint; |
|
| 82 | + $this->titleBlacklistEnabled = $titleBlacklistEnabled; |
|
| 83 | + $this->torExitProvider = $torExitProvider; |
|
| 84 | + } |
|
| 85 | + |
|
| 86 | + /** |
|
| 87 | + * Summary of validateName |
|
| 88 | + * @return ValidationError[] |
|
| 89 | + */ |
|
| 90 | + public function validateName() |
|
| 91 | + { |
|
| 92 | + $errorList = array(); |
|
| 93 | + |
|
| 94 | + // ERRORS |
|
| 95 | + // name is empty |
|
| 96 | + if (trim($this->request->getName()) == "") { |
|
| 97 | + $errorList[ValidationError::NAME_EMPTY] = new ValidationError(ValidationError::NAME_EMPTY); |
|
| 98 | + } |
|
| 99 | + |
|
| 100 | + // name is banned |
|
| 101 | + $ban = $this->banHelper->nameIsBanned($this->request->getName()); |
|
| 102 | + if ($ban != false) { |
|
| 103 | + $errorList[ValidationError::BANNED] = new ValidationError(ValidationError::BANNED); |
|
| 104 | + } |
|
| 105 | + |
|
| 106 | + // username already exists |
|
| 107 | + if ($this->userExists()) { |
|
| 108 | + $errorList[ValidationError::NAME_EXISTS] = new ValidationError(ValidationError::NAME_EXISTS); |
|
| 109 | + } |
|
| 110 | + |
|
| 111 | + // username part of SUL account |
|
| 112 | + if ($this->userSulExists()) { |
|
| 113 | + // using same error slot as name exists - it's the same sort of error, and we probably only want to show one. |
|
| 114 | + $errorList[ValidationError::NAME_EXISTS] = new ValidationError(ValidationError::NAME_EXISTS_SUL); |
|
| 115 | + } |
|
| 116 | + |
|
| 117 | + // username is numbers |
|
| 118 | + if (preg_match("/^[0-9]+$/", $this->request->getName()) === 1) { |
|
| 119 | + $errorList[ValidationError::NAME_NUMONLY] = new ValidationError(ValidationError::NAME_NUMONLY); |
|
| 120 | + } |
|
| 121 | + |
|
| 122 | + // username can't contain #@/<>[]|{} |
|
| 123 | + if (preg_match("/[" . preg_quote("#@/<>[]|{}", "/") . "]/", $this->request->getName()) === 1) { |
|
| 124 | + $errorList[ValidationError::NAME_INVALIDCHAR] = new ValidationError(ValidationError::NAME_INVALIDCHAR); |
|
| 125 | + } |
|
| 126 | + |
|
| 127 | + // existing non-closed request for this name |
|
| 128 | + if ($this->nameRequestExists()) { |
|
| 129 | + $errorList[ValidationError::OPEN_REQUEST_NAME] = new ValidationError(ValidationError::OPEN_REQUEST_NAME); |
|
| 130 | + } |
|
| 131 | + |
|
| 132 | + return $errorList; |
|
| 133 | + } |
|
| 134 | + |
|
| 135 | + /** |
|
| 136 | + * Summary of validateEmail |
|
| 137 | + * @return ValidationError[] |
|
| 138 | + */ |
|
| 139 | + public function validateEmail() |
|
| 140 | + { |
|
| 141 | + $errorList = array(); |
|
| 142 | + |
|
| 143 | + // ERRORS |
|
| 144 | + |
|
| 145 | + // Email is banned |
|
| 146 | + $ban = $this->banHelper->emailIsBanned($this->request->getEmail()); |
|
| 147 | + if ($ban != false) { |
|
| 148 | + $errorList[ValidationError::BANNED] = new ValidationError(ValidationError::BANNED); |
|
| 149 | + } |
|
| 150 | + |
|
| 151 | + // email addresses must match |
|
| 152 | + if ($this->request->getEmail() != $this->emailConfirmation) { |
|
| 153 | + $errorList[ValidationError::EMAIL_MISMATCH] = new ValidationError(ValidationError::EMAIL_MISMATCH); |
|
| 154 | + } |
|
| 155 | + |
|
| 156 | + // email address must be validly formed |
|
| 157 | + if (trim($this->request->getEmail()) == "") { |
|
| 158 | + $errorList[ValidationError::EMAIL_EMPTY] = new ValidationError(ValidationError::EMAIL_EMPTY); |
|
| 159 | + } |
|
| 160 | + |
|
| 161 | + // email address must be validly formed |
|
| 162 | + if (!filter_var($this->request->getEmail(), FILTER_VALIDATE_EMAIL)) { |
|
| 163 | + if (trim($this->request->getEmail()) != "") { |
|
| 164 | + $errorList[ValidationError::EMAIL_INVALID] = new ValidationError(ValidationError::EMAIL_INVALID); |
|
| 165 | + } |
|
| 166 | + } |
|
| 167 | + |
|
| 168 | + // email address can't be wikimedia/wikipedia .com/org |
|
| 169 | + if (preg_match('/.*@.*wiki(m.dia|p.dia)\.(org|com)/i', $this->request->getEmail()) === 1) { |
|
| 170 | + $errorList[ValidationError::EMAIL_WIKIMEDIA] = new ValidationError(ValidationError::EMAIL_WIKIMEDIA); |
|
| 171 | + } |
|
| 172 | + |
|
| 173 | + // WARNINGS |
|
| 174 | + |
|
| 175 | + return $errorList; |
|
| 176 | + } |
|
| 177 | + |
|
| 178 | + /** |
|
| 179 | + * Summary of validateOther |
|
| 180 | + * @return ValidationError[] |
|
| 181 | + */ |
|
| 182 | + public function validateOther() |
|
| 183 | + { |
|
| 184 | + $errorList = array(); |
|
| 185 | + |
|
| 186 | + $trustedIp = $this->xffTrustProvider->getTrustedClientIp($this->request->getIp(), |
|
| 187 | + $this->request->getForwardedIp()); |
|
| 188 | + |
|
| 189 | + // ERRORS |
|
| 190 | + |
|
| 191 | + // TOR nodes |
|
| 192 | + if ($this->torExitProvider->isTorExit($trustedIp)) { |
|
| 193 | + $errorList[ValidationError::BANNED] = new ValidationError(ValidationError::BANNED_TOR); |
|
| 194 | + } |
|
| 195 | + |
|
| 196 | + // IP banned |
|
| 197 | + $ban = $this->banHelper->ipIsBanned($trustedIp); |
|
| 198 | + if ($ban != false) { |
|
| 199 | + $errorList[ValidationError::BANNED] = new ValidationError(ValidationError::BANNED); |
|
| 200 | + } |
|
| 201 | + |
|
| 202 | + // WARNINGS |
|
| 203 | + |
|
| 204 | + // Antispoof check |
|
| 205 | + $this->checkAntiSpoof(); |
|
| 206 | + |
|
| 207 | + // Blacklist check |
|
| 208 | + $this->checkTitleBlacklist(); |
|
| 209 | + |
|
| 210 | + return $errorList; |
|
| 211 | + } |
|
| 212 | + |
|
| 213 | + private function checkAntiSpoof() |
|
| 214 | + { |
|
| 215 | + try { |
|
| 216 | + if (count($this->antiSpoofProvider->getSpoofs($this->request->getName())) > 0) { |
|
| 217 | + // If there were spoofs an Admin should handle the request. |
|
| 218 | + $this->request->setStatus("Flagged users"); |
|
| 219 | + } |
|
| 220 | + } |
|
| 221 | + catch (Exception $ex) { |
|
| 222 | + // logme |
|
| 223 | + } |
|
| 224 | + } |
|
| 225 | + |
|
| 226 | + private function checkTitleBlacklist() |
|
| 227 | + { |
|
| 228 | + if ($this->titleBlacklistEnabled == 1) { |
|
| 229 | + $apiResult = $this->httpHelper->get( |
|
| 230 | + $this->mediawikiApiEndpoint, |
|
| 231 | + array( |
|
| 232 | + 'action' => 'titleblacklist', |
|
| 233 | + 'tbtitle' => $this->request->getName(), |
|
| 234 | + 'tbaction' => 'new-account', |
|
| 235 | + 'tbnooverride' => true, |
|
| 236 | + 'format' => 'php', |
|
| 237 | + ) |
|
| 238 | + ); |
|
| 239 | + |
|
| 240 | + $data = unserialize($apiResult); |
|
| 241 | + |
|
| 242 | + $requestIsOk = $data['titleblacklist']['result'] == "ok"; |
|
| 243 | + |
|
| 244 | + if (!$requestIsOk) { |
|
| 245 | + $this->request->setStatus("Flagged users"); |
|
| 246 | + } |
|
| 247 | + } |
|
| 248 | + } |
|
| 249 | + |
|
| 250 | + private function userExists() |
|
| 251 | + { |
|
| 252 | + $userExists = $this->httpHelper->get( |
|
| 253 | + $this->mediawikiApiEndpoint, |
|
| 254 | + array( |
|
| 255 | + 'action' => 'query', |
|
| 256 | + 'list' => 'users', |
|
| 257 | + 'ususers' => $this->request->getName(), |
|
| 258 | + 'format' => 'php', |
|
| 259 | + ) |
|
| 260 | + ); |
|
| 261 | + |
|
| 262 | + $ue = unserialize($userExists); |
|
| 263 | + if (!isset ($ue['query']['users']['0']['missing']) && isset ($ue['query']['users']['0']['userid'])) { |
|
| 264 | + return true; |
|
| 265 | + } |
|
| 266 | + |
|
| 267 | + return false; |
|
| 268 | + } |
|
| 269 | + |
|
| 270 | + private function userSulExists() |
|
| 271 | + { |
|
| 272 | + $requestName = $this->request->getName(); |
|
| 273 | + |
|
| 274 | + $userExists = $this->httpHelper->get( |
|
| 275 | + $this->mediawikiApiEndpoint, |
|
| 276 | + array( |
|
| 277 | + 'action' => 'query', |
|
| 278 | + 'meta' => 'globaluserinfo', |
|
| 279 | + 'guiuser' => $requestName, |
|
| 280 | + 'format' => 'php', |
|
| 281 | + ) |
|
| 282 | + ); |
|
| 283 | + |
|
| 284 | + $ue = unserialize($userExists); |
|
| 285 | + if (isset ($ue['query']['globaluserinfo']['id'])) { |
|
| 286 | + return true; |
|
| 287 | + } |
|
| 288 | + |
|
| 289 | + return false; |
|
| 290 | + } |
|
| 291 | + |
|
| 292 | + /** |
|
| 293 | + * Checks if a request with this name is currently open |
|
| 294 | + * |
|
| 295 | + * @return bool |
|
| 296 | + */ |
|
| 297 | + private function nameRequestExists() |
|
| 298 | + { |
|
| 299 | + $query = "SELECT COUNT(id) FROM request WHERE status != 'Closed' AND name = :name;"; |
|
| 300 | + $statement = $this->database->prepare($query); |
|
| 301 | + $statement->execute(array(':name' => $this->request->getName())); |
|
| 302 | + |
|
| 303 | + if (!$statement) { |
|
| 304 | + return false; |
|
| 305 | + } |
|
| 306 | + |
|
| 307 | + return $statement->fetchColumn() > 0; |
|
| 308 | + } |
|
| 309 | 309 | } |
@@ -12,99 +12,99 @@ |
||
| 12 | 12 | |
| 13 | 13 | class ValidationError |
| 14 | 14 | { |
| 15 | - const NAME_EMPTY = "name_empty"; |
|
| 16 | - const NAME_EXISTS = "name_exists"; |
|
| 17 | - const NAME_EXISTS_SUL = "name_exists"; |
|
| 18 | - const NAME_NUMONLY = "name_numonly"; |
|
| 19 | - const NAME_INVALIDCHAR = "name_invalidchar"; |
|
| 20 | - const NAME_SANITISED = "name_sanitised"; |
|
| 21 | - const EMAIL_EMPTY = "email_empty"; |
|
| 22 | - const EMAIL_WIKIMEDIA = "email_wikimedia"; |
|
| 23 | - const EMAIL_INVALID = "email_invalid"; |
|
| 24 | - const EMAIL_MISMATCH = "email_mismatch"; |
|
| 25 | - const OPEN_REQUEST_NAME = "open_request_name"; |
|
| 26 | - const BANNED = "banned"; |
|
| 27 | - const BANNED_TOR = "banned_tor"; |
|
| 28 | - /** |
|
| 29 | - * @var array Error text for the above |
|
| 30 | - */ |
|
| 31 | - private static $errorText = array( |
|
| 32 | - self::NAME_EMPTY => 'You\'ve not chosen a username!', |
|
| 33 | - self::NAME_EXISTS => 'I\'m sorry, but the username you selected is already taken. Please try another. ' |
|
| 34 | - . 'Please note that Wikipedia automatically capitalizes the first letter of any user name, therefore ' |
|
| 35 | - . '[[User:example]] would become [[User:Example]].', |
|
| 36 | - self::NAME_EXISTS_SUL => 'I\'m sorry, but the username you selected is already taken. Please try another. ' |
|
| 37 | - . 'Please note that Wikipedia automatically capitalizes the first letter of any user name, therefore ' |
|
| 38 | - . '[[User:example]] would become [[User:Example]].', |
|
| 39 | - self::NAME_NUMONLY => 'The username you chose is invalid: it consists entirely of numbers. Please retry ' |
|
| 40 | - . 'with a valid username.', |
|
| 41 | - self::NAME_INVALIDCHAR => 'There appears to be an invalid character in your username. Please note that the ' |
|
| 42 | - . 'following characters are not allowed: <code># @ / < > [ ] | { }</code>', |
|
| 43 | - self::NAME_SANITISED => 'Your requested username has been automatically adjusted due to technical ' |
|
| 44 | - . 'restrictions. Underscores have been replaced with spaces, and the first character has been capitalised.', |
|
| 45 | - self::EMAIL_EMPTY => 'You need to supply an email address.', |
|
| 46 | - self::EMAIL_WIKIMEDIA => 'Please provide your email address here.', |
|
| 47 | - self::EMAIL_INVALID => 'Invalid E-mail address supplied. Please check you entered it correctly.', |
|
| 48 | - self::EMAIL_MISMATCH => 'The email addresses you entered do not match. Please try again.', |
|
| 49 | - self::OPEN_REQUEST_NAME => 'There is already an open request with this name in this system.', |
|
| 50 | - self::BANNED => 'I\'m sorry, but you are currently banned from requesting accounts using this tool. ' |
|
| 51 | - . 'However, you can still send an email to [email protected] to request an account.', |
|
| 52 | - self::BANNED_TOR => 'Tor exit nodes are currently banned from using this tool due to excessive abuse. ' |
|
| 53 | - . 'Please note that Tor is also currently banned from editing Wikipedia.', |
|
| 54 | - ); |
|
| 55 | - /** |
|
| 56 | - * Summary of $errorCode |
|
| 57 | - * @var string |
|
| 58 | - */ |
|
| 59 | - private $errorCode; |
|
| 60 | - /** |
|
| 61 | - * Summary of $isError |
|
| 62 | - * @var bool |
|
| 63 | - */ |
|
| 64 | - private $isError; |
|
| 15 | + const NAME_EMPTY = "name_empty"; |
|
| 16 | + const NAME_EXISTS = "name_exists"; |
|
| 17 | + const NAME_EXISTS_SUL = "name_exists"; |
|
| 18 | + const NAME_NUMONLY = "name_numonly"; |
|
| 19 | + const NAME_INVALIDCHAR = "name_invalidchar"; |
|
| 20 | + const NAME_SANITISED = "name_sanitised"; |
|
| 21 | + const EMAIL_EMPTY = "email_empty"; |
|
| 22 | + const EMAIL_WIKIMEDIA = "email_wikimedia"; |
|
| 23 | + const EMAIL_INVALID = "email_invalid"; |
|
| 24 | + const EMAIL_MISMATCH = "email_mismatch"; |
|
| 25 | + const OPEN_REQUEST_NAME = "open_request_name"; |
|
| 26 | + const BANNED = "banned"; |
|
| 27 | + const BANNED_TOR = "banned_tor"; |
|
| 28 | + /** |
|
| 29 | + * @var array Error text for the above |
|
| 30 | + */ |
|
| 31 | + private static $errorText = array( |
|
| 32 | + self::NAME_EMPTY => 'You\'ve not chosen a username!', |
|
| 33 | + self::NAME_EXISTS => 'I\'m sorry, but the username you selected is already taken. Please try another. ' |
|
| 34 | + . 'Please note that Wikipedia automatically capitalizes the first letter of any user name, therefore ' |
|
| 35 | + . '[[User:example]] would become [[User:Example]].', |
|
| 36 | + self::NAME_EXISTS_SUL => 'I\'m sorry, but the username you selected is already taken. Please try another. ' |
|
| 37 | + . 'Please note that Wikipedia automatically capitalizes the first letter of any user name, therefore ' |
|
| 38 | + . '[[User:example]] would become [[User:Example]].', |
|
| 39 | + self::NAME_NUMONLY => 'The username you chose is invalid: it consists entirely of numbers. Please retry ' |
|
| 40 | + . 'with a valid username.', |
|
| 41 | + self::NAME_INVALIDCHAR => 'There appears to be an invalid character in your username. Please note that the ' |
|
| 42 | + . 'following characters are not allowed: <code># @ / < > [ ] | { }</code>', |
|
| 43 | + self::NAME_SANITISED => 'Your requested username has been automatically adjusted due to technical ' |
|
| 44 | + . 'restrictions. Underscores have been replaced with spaces, and the first character has been capitalised.', |
|
| 45 | + self::EMAIL_EMPTY => 'You need to supply an email address.', |
|
| 46 | + self::EMAIL_WIKIMEDIA => 'Please provide your email address here.', |
|
| 47 | + self::EMAIL_INVALID => 'Invalid E-mail address supplied. Please check you entered it correctly.', |
|
| 48 | + self::EMAIL_MISMATCH => 'The email addresses you entered do not match. Please try again.', |
|
| 49 | + self::OPEN_REQUEST_NAME => 'There is already an open request with this name in this system.', |
|
| 50 | + self::BANNED => 'I\'m sorry, but you are currently banned from requesting accounts using this tool. ' |
|
| 51 | + . 'However, you can still send an email to [email protected] to request an account.', |
|
| 52 | + self::BANNED_TOR => 'Tor exit nodes are currently banned from using this tool due to excessive abuse. ' |
|
| 53 | + . 'Please note that Tor is also currently banned from editing Wikipedia.', |
|
| 54 | + ); |
|
| 55 | + /** |
|
| 56 | + * Summary of $errorCode |
|
| 57 | + * @var string |
|
| 58 | + */ |
|
| 59 | + private $errorCode; |
|
| 60 | + /** |
|
| 61 | + * Summary of $isError |
|
| 62 | + * @var bool |
|
| 63 | + */ |
|
| 64 | + private $isError; |
|
| 65 | 65 | |
| 66 | - /** |
|
| 67 | - * Summary of __construct |
|
| 68 | - * |
|
| 69 | - * @param string $errorCode |
|
| 70 | - * @param bool $isError |
|
| 71 | - */ |
|
| 72 | - public function __construct($errorCode, $isError = true) |
|
| 73 | - { |
|
| 74 | - $this->errorCode = $errorCode; |
|
| 75 | - $this->isError = $isError; |
|
| 76 | - } |
|
| 66 | + /** |
|
| 67 | + * Summary of __construct |
|
| 68 | + * |
|
| 69 | + * @param string $errorCode |
|
| 70 | + * @param bool $isError |
|
| 71 | + */ |
|
| 72 | + public function __construct($errorCode, $isError = true) |
|
| 73 | + { |
|
| 74 | + $this->errorCode = $errorCode; |
|
| 75 | + $this->isError = $isError; |
|
| 76 | + } |
|
| 77 | 77 | |
| 78 | - /** |
|
| 79 | - * Summary of getErrorCode |
|
| 80 | - * @return string |
|
| 81 | - */ |
|
| 82 | - public function getErrorCode() |
|
| 83 | - { |
|
| 84 | - return $this->errorCode; |
|
| 85 | - } |
|
| 78 | + /** |
|
| 79 | + * Summary of getErrorCode |
|
| 80 | + * @return string |
|
| 81 | + */ |
|
| 82 | + public function getErrorCode() |
|
| 83 | + { |
|
| 84 | + return $this->errorCode; |
|
| 85 | + } |
|
| 86 | 86 | |
| 87 | - /** |
|
| 88 | - * @return string |
|
| 89 | - * @throws Exception |
|
| 90 | - */ |
|
| 91 | - public function getErrorMessage() |
|
| 92 | - { |
|
| 93 | - $text = self::$errorText[$this->errorCode]; |
|
| 87 | + /** |
|
| 88 | + * @return string |
|
| 89 | + * @throws Exception |
|
| 90 | + */ |
|
| 91 | + public function getErrorMessage() |
|
| 92 | + { |
|
| 93 | + $text = self::$errorText[$this->errorCode]; |
|
| 94 | 94 | |
| 95 | - if ($text == null) { |
|
| 96 | - throw new Exception('Unknown validation error'); |
|
| 97 | - } |
|
| 95 | + if ($text == null) { |
|
| 96 | + throw new Exception('Unknown validation error'); |
|
| 97 | + } |
|
| 98 | 98 | |
| 99 | - return $text; |
|
| 100 | - } |
|
| 99 | + return $text; |
|
| 100 | + } |
|
| 101 | 101 | |
| 102 | - /** |
|
| 103 | - * Summary of isError |
|
| 104 | - * @return bool |
|
| 105 | - */ |
|
| 106 | - public function isError() |
|
| 107 | - { |
|
| 108 | - return $this->isError; |
|
| 109 | - } |
|
| 102 | + /** |
|
| 103 | + * Summary of isError |
|
| 104 | + * @return bool |
|
| 105 | + */ |
|
| 106 | + public function isError() |
|
| 107 | + { |
|
| 108 | + return $this->isError; |
|
| 109 | + } |
|
| 110 | 110 | } |
@@ -10,27 +10,27 @@ |
||
| 10 | 10 | |
| 11 | 11 | class IrcColourCode |
| 12 | 12 | { |
| 13 | - const BOLD = "\x02"; |
|
| 14 | - const ITALIC = "\x09"; |
|
| 15 | - const STRIKE = "\x13"; |
|
| 16 | - const UNDERLINE = "\x15"; |
|
| 17 | - const UNDERLINE2 = "\x1f"; |
|
| 18 | - const REVERSE = "\x16"; |
|
| 19 | - const RESET = "\x0f"; |
|
| 20 | - const WHITE = "\x0300"; |
|
| 21 | - const BLACK = "\x0301"; |
|
| 22 | - const DARK_BLUE = "\x0302"; |
|
| 23 | - const DARK_GREEN = "\x0303"; |
|
| 24 | - const RED = "\x0304"; |
|
| 25 | - const DARK_RED = "\x0305"; |
|
| 26 | - const DARK_VIOLET = "\x0306"; |
|
| 27 | - const ORANGE = "\x0307"; |
|
| 28 | - const YELLOW = "\x0308"; |
|
| 29 | - const LIGHT_GREEN = "\x0309"; |
|
| 30 | - const CYAN = "\x0310"; |
|
| 31 | - const LIGHT_CYAN = "\x0311"; |
|
| 32 | - const BLUE = "\x0312"; |
|
| 33 | - const VIOLET = "\x0313"; |
|
| 34 | - const DARK_GREY = "\x0314"; |
|
| 35 | - const LIGHT_GREY = "\x0315"; |
|
| 13 | + const BOLD = "\x02"; |
|
| 14 | + const ITALIC = "\x09"; |
|
| 15 | + const STRIKE = "\x13"; |
|
| 16 | + const UNDERLINE = "\x15"; |
|
| 17 | + const UNDERLINE2 = "\x1f"; |
|
| 18 | + const REVERSE = "\x16"; |
|
| 19 | + const RESET = "\x0f"; |
|
| 20 | + const WHITE = "\x0300"; |
|
| 21 | + const BLACK = "\x0301"; |
|
| 22 | + const DARK_BLUE = "\x0302"; |
|
| 23 | + const DARK_GREEN = "\x0303"; |
|
| 24 | + const RED = "\x0304"; |
|
| 25 | + const DARK_RED = "\x0305"; |
|
| 26 | + const DARK_VIOLET = "\x0306"; |
|
| 27 | + const ORANGE = "\x0307"; |
|
| 28 | + const YELLOW = "\x0308"; |
|
| 29 | + const LIGHT_GREEN = "\x0309"; |
|
| 30 | + const CYAN = "\x0310"; |
|
| 31 | + const LIGHT_CYAN = "\x0311"; |
|
| 32 | + const BLUE = "\x0312"; |
|
| 33 | + const VIOLET = "\x0313"; |
|
| 34 | + const DARK_GREY = "\x0314"; |
|
| 35 | + const LIGHT_GREY = "\x0315"; |
|
| 36 | 36 | } |
@@ -17,25 +17,25 @@ |
||
| 17 | 17 | */ |
| 18 | 18 | class Session |
| 19 | 19 | { |
| 20 | - public static function start() |
|
| 21 | - { |
|
| 22 | - ini_set('session.cookie_httponly', 1); |
|
| 20 | + public static function start() |
|
| 21 | + { |
|
| 22 | + ini_set('session.cookie_httponly', 1); |
|
| 23 | 23 | |
| 24 | - if (WebRequest::isHttps()) { |
|
| 25 | - ini_set('session.cookie_secure', 1); |
|
| 26 | - } |
|
| 24 | + if (WebRequest::isHttps()) { |
|
| 25 | + ini_set('session.cookie_secure', 1); |
|
| 26 | + } |
|
| 27 | 27 | |
| 28 | - session_start(); |
|
| 29 | - } |
|
| 28 | + session_start(); |
|
| 29 | + } |
|
| 30 | 30 | |
| 31 | - public static function destroy() |
|
| 32 | - { |
|
| 33 | - session_destroy(); |
|
| 34 | - } |
|
| 31 | + public static function destroy() |
|
| 32 | + { |
|
| 33 | + session_destroy(); |
|
| 34 | + } |
|
| 35 | 35 | |
| 36 | - public static function restart() |
|
| 37 | - { |
|
| 38 | - self::destroy(); |
|
| 39 | - self::start(); |
|
| 40 | - } |
|
| 36 | + public static function restart() |
|
| 37 | + { |
|
| 38 | + self::destroy(); |
|
| 39 | + self::start(); |
|
| 40 | + } |
|
| 41 | 41 | } |
@@ -13,53 +13,53 @@ |
||
| 13 | 13 | */ |
| 14 | 14 | class DebugHelper |
| 15 | 15 | { |
| 16 | - /** |
|
| 17 | - * Internal mockable method wrapper for debug_backtrace. |
|
| 18 | - * |
|
| 19 | - * As mocking out debug_backtrace uses debug_backtrace internally, we need this in order to not cause a recursive |
|
| 20 | - * cascade until the runtime explodes. |
|
| 21 | - * |
|
| 22 | - * Instead, we mock this method, which allows debug_backtrace to still be called correctly. |
|
| 23 | - * |
|
| 24 | - * @return array |
|
| 25 | - */ |
|
| 26 | - public function get_debug_backtrace() |
|
| 27 | - { |
|
| 28 | - return debug_backtrace(); |
|
| 29 | - } |
|
| 16 | + /** |
|
| 17 | + * Internal mockable method wrapper for debug_backtrace. |
|
| 18 | + * |
|
| 19 | + * As mocking out debug_backtrace uses debug_backtrace internally, we need this in order to not cause a recursive |
|
| 20 | + * cascade until the runtime explodes. |
|
| 21 | + * |
|
| 22 | + * Instead, we mock this method, which allows debug_backtrace to still be called correctly. |
|
| 23 | + * |
|
| 24 | + * @return array |
|
| 25 | + */ |
|
| 26 | + public function get_debug_backtrace() |
|
| 27 | + { |
|
| 28 | + return debug_backtrace(); |
|
| 29 | + } |
|
| 30 | 30 | |
| 31 | - /** |
|
| 32 | - * Returns a string representation of the current backtrace for display. |
|
| 33 | - * |
|
| 34 | - * Note that this explicitly excludes the top two frames, which will be methods from this class. |
|
| 35 | - * |
|
| 36 | - * @return string |
|
| 37 | - */ |
|
| 38 | - public function getBacktrace() |
|
| 39 | - { |
|
| 40 | - $backtrace = $this->get_debug_backtrace(); |
|
| 31 | + /** |
|
| 32 | + * Returns a string representation of the current backtrace for display. |
|
| 33 | + * |
|
| 34 | + * Note that this explicitly excludes the top two frames, which will be methods from this class. |
|
| 35 | + * |
|
| 36 | + * @return string |
|
| 37 | + */ |
|
| 38 | + public function getBacktrace() |
|
| 39 | + { |
|
| 40 | + $backtrace = $this->get_debug_backtrace(); |
|
| 41 | 41 | |
| 42 | - $output = ""; |
|
| 42 | + $output = ""; |
|
| 43 | 43 | |
| 44 | - $count = 0; |
|
| 45 | - foreach ($backtrace as $line) { |
|
| 46 | - if ($count <= 1) { |
|
| 47 | - $count++; |
|
| 48 | - continue; |
|
| 49 | - } |
|
| 44 | + $count = 0; |
|
| 45 | + foreach ($backtrace as $line) { |
|
| 46 | + if ($count <= 1) { |
|
| 47 | + $count++; |
|
| 48 | + continue; |
|
| 49 | + } |
|
| 50 | 50 | |
| 51 | - $output .= "#{$count}: "; |
|
| 51 | + $output .= "#{$count}: "; |
|
| 52 | 52 | |
| 53 | - if (isset($line['type']) && $line['type'] != "") { |
|
| 54 | - $output .= $line['class'] . $line['type']; |
|
| 55 | - } |
|
| 53 | + if (isset($line['type']) && $line['type'] != "") { |
|
| 54 | + $output .= $line['class'] . $line['type']; |
|
| 55 | + } |
|
| 56 | 56 | |
| 57 | - $output .= $line['function'] . "(...)"; |
|
| 58 | - $output .= " [{$line['file']}#{$line['line']}\r\n"; |
|
| 57 | + $output .= $line['function'] . "(...)"; |
|
| 58 | + $output .= " [{$line['file']}#{$line['line']}\r\n"; |
|
| 59 | 59 | |
| 60 | - $count++; |
|
| 61 | - } |
|
| 60 | + $count++; |
|
| 61 | + } |
|
| 62 | 62 | |
| 63 | - return $output; |
|
| 64 | - } |
|
| 63 | + return $output; |
|
| 64 | + } |
|
| 65 | 65 | } |
@@ -12,16 +12,16 @@ |
||
| 12 | 12 | |
| 13 | 13 | class FakeBlacklistHelper implements IBlacklistHelper |
| 14 | 14 | { |
| 15 | - /** |
|
| 16 | - * Returns a value indicating whether the provided username is blacklisted by the on-wiki title blacklist |
|
| 17 | - * |
|
| 18 | - * @param string $username |
|
| 19 | - * |
|
| 20 | - * @return bool |
|
| 21 | - */ |
|
| 22 | - public function isBlacklisted($username) |
|
| 23 | - { |
|
| 24 | - // Short-circuit |
|
| 25 | - return false; |
|
| 26 | - } |
|
| 15 | + /** |
|
| 16 | + * Returns a value indicating whether the provided username is blacklisted by the on-wiki title blacklist |
|
| 17 | + * |
|
| 18 | + * @param string $username |
|
| 19 | + * |
|
| 20 | + * @return bool |
|
| 21 | + */ |
|
| 22 | + public function isBlacklisted($username) |
|
| 23 | + { |
|
| 24 | + // Short-circuit |
|
| 25 | + return false; |
|
| 26 | + } |
|
| 27 | 27 | } |
| 28 | 28 | \ No newline at end of file |
@@ -14,49 +14,49 @@ |
||
| 14 | 14 | |
| 15 | 15 | class BanHelper implements IBanHelper |
| 16 | 16 | { |
| 17 | - /** |
|
| 18 | - * @var PdoDatabase |
|
| 19 | - */ |
|
| 20 | - private $database; |
|
| 17 | + /** |
|
| 18 | + * @var PdoDatabase |
|
| 19 | + */ |
|
| 20 | + private $database; |
|
| 21 | 21 | |
| 22 | - public function __construct(PdoDatabase $database) |
|
| 23 | - { |
|
| 24 | - $this->database = $database; |
|
| 25 | - } |
|
| 22 | + public function __construct(PdoDatabase $database) |
|
| 23 | + { |
|
| 24 | + $this->database = $database; |
|
| 25 | + } |
|
| 26 | 26 | |
| 27 | - /** |
|
| 28 | - * Summary of nameIsBanned |
|
| 29 | - * |
|
| 30 | - * @param string $name The name to test if is banned. |
|
| 31 | - * |
|
| 32 | - * @return Ban |
|
| 33 | - */ |
|
| 34 | - public function nameIsBanned($name) |
|
| 35 | - { |
|
| 36 | - return Ban::getBanByTarget($name, "Name", $this->database); |
|
| 37 | - } |
|
| 27 | + /** |
|
| 28 | + * Summary of nameIsBanned |
|
| 29 | + * |
|
| 30 | + * @param string $name The name to test if is banned. |
|
| 31 | + * |
|
| 32 | + * @return Ban |
|
| 33 | + */ |
|
| 34 | + public function nameIsBanned($name) |
|
| 35 | + { |
|
| 36 | + return Ban::getBanByTarget($name, "Name", $this->database); |
|
| 37 | + } |
|
| 38 | 38 | |
| 39 | - /** |
|
| 40 | - * Summary of emailIsBanned |
|
| 41 | - * |
|
| 42 | - * @param string $email |
|
| 43 | - * |
|
| 44 | - * @return Ban |
|
| 45 | - */ |
|
| 46 | - public function emailIsBanned($email) |
|
| 47 | - { |
|
| 48 | - return Ban::getBanByTarget($email, "EMail", $this->database); |
|
| 49 | - } |
|
| 39 | + /** |
|
| 40 | + * Summary of emailIsBanned |
|
| 41 | + * |
|
| 42 | + * @param string $email |
|
| 43 | + * |
|
| 44 | + * @return Ban |
|
| 45 | + */ |
|
| 46 | + public function emailIsBanned($email) |
|
| 47 | + { |
|
| 48 | + return Ban::getBanByTarget($email, "EMail", $this->database); |
|
| 49 | + } |
|
| 50 | 50 | |
| 51 | - /** |
|
| 52 | - * Summary of ipIsBanned |
|
| 53 | - * |
|
| 54 | - * @param string $ip |
|
| 55 | - * |
|
| 56 | - * @return Ban |
|
| 57 | - */ |
|
| 58 | - public function ipIsBanned($ip) |
|
| 59 | - { |
|
| 60 | - return Ban::getBanByTarget($ip, "IP", $this->database); |
|
| 61 | - } |
|
| 51 | + /** |
|
| 52 | + * Summary of ipIsBanned |
|
| 53 | + * |
|
| 54 | + * @param string $ip |
|
| 55 | + * |
|
| 56 | + * @return Ban |
|
| 57 | + */ |
|
| 58 | + public function ipIsBanned($ip) |
|
| 59 | + { |
|
| 60 | + return Ban::getBanByTarget($ip, "IP", $this->database); |
|
| 61 | + } |
|
| 62 | 62 | } |
@@ -26,366 +26,366 @@ |
||
| 26 | 26 | |
| 27 | 27 | class LogHelper |
| 28 | 28 | { |
| 29 | - /** |
|
| 30 | - * Summary of getRequestLogsWithComments |
|
| 31 | - * |
|
| 32 | - * @param int $requestId |
|
| 33 | - * @param PdoDatabase $db |
|
| 34 | - * @param SecurityManager $securityManager |
|
| 35 | - * |
|
| 36 | - * @return \Waca\DataObject[] |
|
| 37 | - */ |
|
| 38 | - public static function getRequestLogsWithComments($requestId, PdoDatabase $db, SecurityManager $securityManager) |
|
| 39 | - { |
|
| 40 | - $logs = LogSearchHelper::get($db)->byObjectType('Request')->byObjectId($requestId)->fetch(); |
|
| 41 | - |
|
| 42 | - $currentUser = User::getCurrent($db); |
|
| 43 | - $securityResult = $securityManager->allows('RequestData', 'seeRestrictedComments', $currentUser); |
|
| 44 | - $showAllComments = $securityResult === SecurityManager::ALLOWED; |
|
| 45 | - |
|
| 46 | - $comments = Comment::getForRequest($requestId, $db, $showAllComments, $currentUser->getId()); |
|
| 47 | - |
|
| 48 | - $items = array_merge($logs, $comments); |
|
| 49 | - |
|
| 50 | - /** |
|
| 51 | - * @param DataObject $item |
|
| 52 | - * |
|
| 53 | - * @return int |
|
| 54 | - */ |
|
| 55 | - $sortKey = function(DataObject $item) { |
|
| 56 | - if ($item instanceof Log) { |
|
| 57 | - return $item->getTimestamp()->getTimestamp(); |
|
| 58 | - } |
|
| 59 | - |
|
| 60 | - if ($item instanceof Comment) { |
|
| 61 | - return $item->getTime()->getTimestamp(); |
|
| 62 | - } |
|
| 63 | - |
|
| 64 | - return 0; |
|
| 65 | - }; |
|
| 66 | - |
|
| 67 | - do { |
|
| 68 | - $flag = false; |
|
| 69 | - |
|
| 70 | - $loopLimit = (count($items) - 1); |
|
| 71 | - for ($i = 0; $i < $loopLimit; $i++) { |
|
| 72 | - // are these two items out of order? |
|
| 73 | - if ($sortKey($items[$i]) > $sortKey($items[$i + 1])) { |
|
| 74 | - // swap them |
|
| 75 | - $swap = $items[$i]; |
|
| 76 | - $items[$i] = $items[$i + 1]; |
|
| 77 | - $items[$i + 1] = $swap; |
|
| 78 | - |
|
| 79 | - // set a flag to say we've modified the array this time around |
|
| 80 | - $flag = true; |
|
| 81 | - } |
|
| 82 | - } |
|
| 83 | - } |
|
| 84 | - while ($flag); |
|
| 85 | - |
|
| 86 | - return $items; |
|
| 87 | - } |
|
| 88 | - |
|
| 89 | - /** |
|
| 90 | - * Summary of getLogDescription |
|
| 91 | - * |
|
| 92 | - * @param Log $entry |
|
| 93 | - * |
|
| 94 | - * @return string |
|
| 95 | - */ |
|
| 96 | - public static function getLogDescription(Log $entry) |
|
| 97 | - { |
|
| 98 | - $text = "Deferred to "; |
|
| 99 | - if (substr($entry->getAction(), 0, strlen($text)) == $text) { |
|
| 100 | - // Deferred to a different queue |
|
| 101 | - // This is exactly what we want to display. |
|
| 102 | - return $entry->getAction(); |
|
| 103 | - } |
|
| 104 | - |
|
| 105 | - $text = "Closed custom-n"; |
|
| 106 | - if ($entry->getAction() == $text) { |
|
| 107 | - // Custom-closed |
|
| 108 | - return "closed (custom reason - account not created)"; |
|
| 109 | - } |
|
| 110 | - |
|
| 111 | - $text = "Closed custom-y"; |
|
| 112 | - if ($entry->getAction() == $text) { |
|
| 113 | - // Custom-closed |
|
| 114 | - return "closed (custom reason - account created)"; |
|
| 115 | - } |
|
| 116 | - |
|
| 117 | - $text = "Closed 0"; |
|
| 118 | - if ($entry->getAction() == $text) { |
|
| 119 | - // Dropped the request - short-circuit the lookup |
|
| 120 | - return "dropped request"; |
|
| 121 | - } |
|
| 122 | - |
|
| 123 | - $text = "Closed "; |
|
| 124 | - if (substr($entry->getAction(), 0, strlen($text)) == $text) { |
|
| 125 | - // Closed with a reason - do a lookup here. |
|
| 126 | - $id = substr($entry->getAction(), strlen($text)); |
|
| 127 | - /** @var EmailTemplate $template */ |
|
| 128 | - $template = EmailTemplate::getById((int)$id, $entry->getDatabase()); |
|
| 129 | - |
|
| 130 | - if ($template != false) { |
|
| 131 | - return "closed (" . $template->getName() . ")"; |
|
| 132 | - } |
|
| 133 | - } |
|
| 134 | - |
|
| 135 | - // Fall back to the basic stuff |
|
| 136 | - $lookup = array( |
|
| 137 | - 'Reserved' => 'reserved', |
|
| 138 | - 'Email Confirmed' => 'email-confirmed', |
|
| 139 | - 'Unreserved' => 'unreserved', |
|
| 140 | - 'Approved' => 'approved', |
|
| 141 | - 'Suspended' => 'suspended', |
|
| 142 | - 'RoleChange' => 'changed roles', |
|
| 143 | - 'Banned' => 'banned', |
|
| 144 | - 'Edited' => 'edited interface message', |
|
| 145 | - 'Declined' => 'declined', |
|
| 146 | - 'EditComment-c' => 'edited a comment', |
|
| 147 | - 'EditComment-r' => 'edited a comment', |
|
| 148 | - 'Unbanned' => 'unbanned', |
|
| 149 | - 'Promoted' => 'promoted to tool admin', |
|
| 150 | - 'BreakReserve' => 'forcibly broke the reservation', |
|
| 151 | - 'Prefchange' => 'changed user preferences', |
|
| 152 | - 'Renamed' => 'renamed', |
|
| 153 | - 'Demoted' => 'demoted from tool admin', |
|
| 154 | - 'ReceiveReserved' => 'received the reservation', |
|
| 155 | - 'SendReserved' => 'sent the reservation', |
|
| 156 | - 'EditedEmail' => 'edited email', |
|
| 157 | - 'DeletedTemplate' => 'deleted template', |
|
| 158 | - 'EditedTemplate' => 'edited template', |
|
| 159 | - 'CreatedEmail' => 'created email', |
|
| 160 | - 'CreatedTemplate' => 'created template', |
|
| 161 | - 'SentMail' => 'sent an email to the requestor', |
|
| 162 | - 'Registered' => 'registered a tool account', |
|
| 163 | - ); |
|
| 164 | - |
|
| 165 | - if (array_key_exists($entry->getAction(), $lookup)) { |
|
| 166 | - return $lookup[$entry->getAction()]; |
|
| 167 | - } |
|
| 168 | - |
|
| 169 | - // OK, I don't know what this is. Fall back to something sane. |
|
| 170 | - return "performed an unknown action ({$entry->getAction()})"; |
|
| 171 | - } |
|
| 172 | - |
|
| 173 | - /** |
|
| 174 | - * @param PdoDatabase $database |
|
| 175 | - * |
|
| 176 | - * @return array |
|
| 177 | - */ |
|
| 178 | - public static function getLogActions(PdoDatabase $database) |
|
| 179 | - { |
|
| 180 | - $lookup = array( |
|
| 181 | - 'Reserved' => 'reserved', |
|
| 182 | - 'Email Confirmed' => 'email-confirmed', |
|
| 183 | - 'Unreserved' => 'unreserved', |
|
| 184 | - 'Approved' => 'approved', |
|
| 185 | - 'Suspended' => 'suspended', |
|
| 186 | - 'RoleChange' => 'changed roles', |
|
| 187 | - 'Banned' => 'banned', |
|
| 188 | - 'Edited' => 'edited interface message', |
|
| 189 | - 'Declined' => 'declined', |
|
| 190 | - 'EditComment-c' => 'edited a comment (by comment ID)', |
|
| 191 | - 'EditComment-r' => 'edited a comment (by request)', |
|
| 192 | - 'Unbanned' => 'unbanned', |
|
| 193 | - 'Promoted' => 'promoted to tool admin', |
|
| 194 | - 'BreakReserve' => 'forcibly broke the reservation', |
|
| 195 | - 'Prefchange' => 'changed user preferences', |
|
| 196 | - 'Renamed' => 'renamed', |
|
| 197 | - 'Demoted' => 'demoted from tool admin', |
|
| 198 | - 'ReceiveReserved' => 'received the reservation', |
|
| 199 | - 'SendReserved' => 'sent the reservation', |
|
| 200 | - 'EditedEmail' => 'edited email', |
|
| 201 | - 'DeletedTemplate' => 'deleted template', |
|
| 202 | - 'EditedTemplate' => 'edited template', |
|
| 203 | - 'CreatedEmail' => 'created email', |
|
| 204 | - 'CreatedTemplate' => 'created template', |
|
| 205 | - 'SentMail' => 'sent an email to the requestor', |
|
| 206 | - 'Registered' => 'registered a tool account', |
|
| 207 | - 'Closed 0' => 'dropped request', |
|
| 208 | - ); |
|
| 209 | - |
|
| 210 | - $statement = $database->query(<<<SQL |
|
| 29 | + /** |
|
| 30 | + * Summary of getRequestLogsWithComments |
|
| 31 | + * |
|
| 32 | + * @param int $requestId |
|
| 33 | + * @param PdoDatabase $db |
|
| 34 | + * @param SecurityManager $securityManager |
|
| 35 | + * |
|
| 36 | + * @return \Waca\DataObject[] |
|
| 37 | + */ |
|
| 38 | + public static function getRequestLogsWithComments($requestId, PdoDatabase $db, SecurityManager $securityManager) |
|
| 39 | + { |
|
| 40 | + $logs = LogSearchHelper::get($db)->byObjectType('Request')->byObjectId($requestId)->fetch(); |
|
| 41 | + |
|
| 42 | + $currentUser = User::getCurrent($db); |
|
| 43 | + $securityResult = $securityManager->allows('RequestData', 'seeRestrictedComments', $currentUser); |
|
| 44 | + $showAllComments = $securityResult === SecurityManager::ALLOWED; |
|
| 45 | + |
|
| 46 | + $comments = Comment::getForRequest($requestId, $db, $showAllComments, $currentUser->getId()); |
|
| 47 | + |
|
| 48 | + $items = array_merge($logs, $comments); |
|
| 49 | + |
|
| 50 | + /** |
|
| 51 | + * @param DataObject $item |
|
| 52 | + * |
|
| 53 | + * @return int |
|
| 54 | + */ |
|
| 55 | + $sortKey = function(DataObject $item) { |
|
| 56 | + if ($item instanceof Log) { |
|
| 57 | + return $item->getTimestamp()->getTimestamp(); |
|
| 58 | + } |
|
| 59 | + |
|
| 60 | + if ($item instanceof Comment) { |
|
| 61 | + return $item->getTime()->getTimestamp(); |
|
| 62 | + } |
|
| 63 | + |
|
| 64 | + return 0; |
|
| 65 | + }; |
|
| 66 | + |
|
| 67 | + do { |
|
| 68 | + $flag = false; |
|
| 69 | + |
|
| 70 | + $loopLimit = (count($items) - 1); |
|
| 71 | + for ($i = 0; $i < $loopLimit; $i++) { |
|
| 72 | + // are these two items out of order? |
|
| 73 | + if ($sortKey($items[$i]) > $sortKey($items[$i + 1])) { |
|
| 74 | + // swap them |
|
| 75 | + $swap = $items[$i]; |
|
| 76 | + $items[$i] = $items[$i + 1]; |
|
| 77 | + $items[$i + 1] = $swap; |
|
| 78 | + |
|
| 79 | + // set a flag to say we've modified the array this time around |
|
| 80 | + $flag = true; |
|
| 81 | + } |
|
| 82 | + } |
|
| 83 | + } |
|
| 84 | + while ($flag); |
|
| 85 | + |
|
| 86 | + return $items; |
|
| 87 | + } |
|
| 88 | + |
|
| 89 | + /** |
|
| 90 | + * Summary of getLogDescription |
|
| 91 | + * |
|
| 92 | + * @param Log $entry |
|
| 93 | + * |
|
| 94 | + * @return string |
|
| 95 | + */ |
|
| 96 | + public static function getLogDescription(Log $entry) |
|
| 97 | + { |
|
| 98 | + $text = "Deferred to "; |
|
| 99 | + if (substr($entry->getAction(), 0, strlen($text)) == $text) { |
|
| 100 | + // Deferred to a different queue |
|
| 101 | + // This is exactly what we want to display. |
|
| 102 | + return $entry->getAction(); |
|
| 103 | + } |
|
| 104 | + |
|
| 105 | + $text = "Closed custom-n"; |
|
| 106 | + if ($entry->getAction() == $text) { |
|
| 107 | + // Custom-closed |
|
| 108 | + return "closed (custom reason - account not created)"; |
|
| 109 | + } |
|
| 110 | + |
|
| 111 | + $text = "Closed custom-y"; |
|
| 112 | + if ($entry->getAction() == $text) { |
|
| 113 | + // Custom-closed |
|
| 114 | + return "closed (custom reason - account created)"; |
|
| 115 | + } |
|
| 116 | + |
|
| 117 | + $text = "Closed 0"; |
|
| 118 | + if ($entry->getAction() == $text) { |
|
| 119 | + // Dropped the request - short-circuit the lookup |
|
| 120 | + return "dropped request"; |
|
| 121 | + } |
|
| 122 | + |
|
| 123 | + $text = "Closed "; |
|
| 124 | + if (substr($entry->getAction(), 0, strlen($text)) == $text) { |
|
| 125 | + // Closed with a reason - do a lookup here. |
|
| 126 | + $id = substr($entry->getAction(), strlen($text)); |
|
| 127 | + /** @var EmailTemplate $template */ |
|
| 128 | + $template = EmailTemplate::getById((int)$id, $entry->getDatabase()); |
|
| 129 | + |
|
| 130 | + if ($template != false) { |
|
| 131 | + return "closed (" . $template->getName() . ")"; |
|
| 132 | + } |
|
| 133 | + } |
|
| 134 | + |
|
| 135 | + // Fall back to the basic stuff |
|
| 136 | + $lookup = array( |
|
| 137 | + 'Reserved' => 'reserved', |
|
| 138 | + 'Email Confirmed' => 'email-confirmed', |
|
| 139 | + 'Unreserved' => 'unreserved', |
|
| 140 | + 'Approved' => 'approved', |
|
| 141 | + 'Suspended' => 'suspended', |
|
| 142 | + 'RoleChange' => 'changed roles', |
|
| 143 | + 'Banned' => 'banned', |
|
| 144 | + 'Edited' => 'edited interface message', |
|
| 145 | + 'Declined' => 'declined', |
|
| 146 | + 'EditComment-c' => 'edited a comment', |
|
| 147 | + 'EditComment-r' => 'edited a comment', |
|
| 148 | + 'Unbanned' => 'unbanned', |
|
| 149 | + 'Promoted' => 'promoted to tool admin', |
|
| 150 | + 'BreakReserve' => 'forcibly broke the reservation', |
|
| 151 | + 'Prefchange' => 'changed user preferences', |
|
| 152 | + 'Renamed' => 'renamed', |
|
| 153 | + 'Demoted' => 'demoted from tool admin', |
|
| 154 | + 'ReceiveReserved' => 'received the reservation', |
|
| 155 | + 'SendReserved' => 'sent the reservation', |
|
| 156 | + 'EditedEmail' => 'edited email', |
|
| 157 | + 'DeletedTemplate' => 'deleted template', |
|
| 158 | + 'EditedTemplate' => 'edited template', |
|
| 159 | + 'CreatedEmail' => 'created email', |
|
| 160 | + 'CreatedTemplate' => 'created template', |
|
| 161 | + 'SentMail' => 'sent an email to the requestor', |
|
| 162 | + 'Registered' => 'registered a tool account', |
|
| 163 | + ); |
|
| 164 | + |
|
| 165 | + if (array_key_exists($entry->getAction(), $lookup)) { |
|
| 166 | + return $lookup[$entry->getAction()]; |
|
| 167 | + } |
|
| 168 | + |
|
| 169 | + // OK, I don't know what this is. Fall back to something sane. |
|
| 170 | + return "performed an unknown action ({$entry->getAction()})"; |
|
| 171 | + } |
|
| 172 | + |
|
| 173 | + /** |
|
| 174 | + * @param PdoDatabase $database |
|
| 175 | + * |
|
| 176 | + * @return array |
|
| 177 | + */ |
|
| 178 | + public static function getLogActions(PdoDatabase $database) |
|
| 179 | + { |
|
| 180 | + $lookup = array( |
|
| 181 | + 'Reserved' => 'reserved', |
|
| 182 | + 'Email Confirmed' => 'email-confirmed', |
|
| 183 | + 'Unreserved' => 'unreserved', |
|
| 184 | + 'Approved' => 'approved', |
|
| 185 | + 'Suspended' => 'suspended', |
|
| 186 | + 'RoleChange' => 'changed roles', |
|
| 187 | + 'Banned' => 'banned', |
|
| 188 | + 'Edited' => 'edited interface message', |
|
| 189 | + 'Declined' => 'declined', |
|
| 190 | + 'EditComment-c' => 'edited a comment (by comment ID)', |
|
| 191 | + 'EditComment-r' => 'edited a comment (by request)', |
|
| 192 | + 'Unbanned' => 'unbanned', |
|
| 193 | + 'Promoted' => 'promoted to tool admin', |
|
| 194 | + 'BreakReserve' => 'forcibly broke the reservation', |
|
| 195 | + 'Prefchange' => 'changed user preferences', |
|
| 196 | + 'Renamed' => 'renamed', |
|
| 197 | + 'Demoted' => 'demoted from tool admin', |
|
| 198 | + 'ReceiveReserved' => 'received the reservation', |
|
| 199 | + 'SendReserved' => 'sent the reservation', |
|
| 200 | + 'EditedEmail' => 'edited email', |
|
| 201 | + 'DeletedTemplate' => 'deleted template', |
|
| 202 | + 'EditedTemplate' => 'edited template', |
|
| 203 | + 'CreatedEmail' => 'created email', |
|
| 204 | + 'CreatedTemplate' => 'created template', |
|
| 205 | + 'SentMail' => 'sent an email to the requestor', |
|
| 206 | + 'Registered' => 'registered a tool account', |
|
| 207 | + 'Closed 0' => 'dropped request', |
|
| 208 | + ); |
|
| 209 | + |
|
| 210 | + $statement = $database->query(<<<SQL |
|
| 211 | 211 | SELECT CONCAT('Closed ', id) AS k, CONCAT('closed (',name,')') AS v |
| 212 | 212 | FROM emailtemplate; |
| 213 | 213 | SQL |
| 214 | - ); |
|
| 215 | - foreach ($statement->fetchAll(PDO::FETCH_ASSOC) as $row) { |
|
| 216 | - $lookup[$row['k']] = $row['v']; |
|
| 217 | - } |
|
| 218 | - |
|
| 219 | - return $lookup; |
|
| 220 | - } |
|
| 221 | - |
|
| 222 | - public static function getObjectTypes() |
|
| 223 | - { |
|
| 224 | - return array( |
|
| 225 | - 'Ban' => 'Ban', |
|
| 226 | - 'Comment' => 'Comment', |
|
| 227 | - 'EmailTemplate' => 'Email template', |
|
| 228 | - 'Request' => 'Request', |
|
| 229 | - 'SiteNotice' => 'Site notice', |
|
| 230 | - 'User' => 'User', |
|
| 231 | - 'WelcomeTemplate' => 'Welcome template', |
|
| 232 | - ); |
|
| 233 | - } |
|
| 234 | - |
|
| 235 | - /** |
|
| 236 | - * This returns a HTML |
|
| 237 | - * |
|
| 238 | - * @param string $objectId |
|
| 239 | - * @param string $objectType |
|
| 240 | - * @param PdoDatabase $database |
|
| 241 | - * @param SiteConfiguration $configuration |
|
| 242 | - * |
|
| 243 | - * @return null|string |
|
| 244 | - * @category Security-Critical |
|
| 245 | - */ |
|
| 246 | - private static function getObjectDescription( |
|
| 247 | - $objectId, |
|
| 248 | - $objectType, |
|
| 249 | - PdoDatabase $database, |
|
| 250 | - SiteConfiguration $configuration |
|
| 251 | - ) { |
|
| 252 | - if ($objectType == '') { |
|
| 253 | - return null; |
|
| 254 | - } |
|
| 255 | - |
|
| 256 | - $baseurl = $configuration->getBaseUrl(); |
|
| 257 | - |
|
| 258 | - switch ($objectType) { |
|
| 259 | - case 'Ban': |
|
| 260 | - /** @var Ban $ban */ |
|
| 261 | - $ban = Ban::getById($objectId, $database); |
|
| 262 | - |
|
| 263 | - if ($ban === false) { |
|
| 264 | - return 'Ban #' . $objectId . "</a>"; |
|
| 265 | - } |
|
| 266 | - |
|
| 267 | - return 'Ban #' . $objectId . " (" . htmlentities($ban->getTarget()) . ")</a>"; |
|
| 268 | - case 'EmailTemplate': |
|
| 269 | - /** @var EmailTemplate $emailTemplate */ |
|
| 270 | - $emailTemplate = EmailTemplate::getById($objectId, $database); |
|
| 271 | - $name = htmlentities($emailTemplate->getName(), ENT_COMPAT, 'UTF-8'); |
|
| 272 | - |
|
| 273 | - return <<<HTML |
|
| 214 | + ); |
|
| 215 | + foreach ($statement->fetchAll(PDO::FETCH_ASSOC) as $row) { |
|
| 216 | + $lookup[$row['k']] = $row['v']; |
|
| 217 | + } |
|
| 218 | + |
|
| 219 | + return $lookup; |
|
| 220 | + } |
|
| 221 | + |
|
| 222 | + public static function getObjectTypes() |
|
| 223 | + { |
|
| 224 | + return array( |
|
| 225 | + 'Ban' => 'Ban', |
|
| 226 | + 'Comment' => 'Comment', |
|
| 227 | + 'EmailTemplate' => 'Email template', |
|
| 228 | + 'Request' => 'Request', |
|
| 229 | + 'SiteNotice' => 'Site notice', |
|
| 230 | + 'User' => 'User', |
|
| 231 | + 'WelcomeTemplate' => 'Welcome template', |
|
| 232 | + ); |
|
| 233 | + } |
|
| 234 | + |
|
| 235 | + /** |
|
| 236 | + * This returns a HTML |
|
| 237 | + * |
|
| 238 | + * @param string $objectId |
|
| 239 | + * @param string $objectType |
|
| 240 | + * @param PdoDatabase $database |
|
| 241 | + * @param SiteConfiguration $configuration |
|
| 242 | + * |
|
| 243 | + * @return null|string |
|
| 244 | + * @category Security-Critical |
|
| 245 | + */ |
|
| 246 | + private static function getObjectDescription( |
|
| 247 | + $objectId, |
|
| 248 | + $objectType, |
|
| 249 | + PdoDatabase $database, |
|
| 250 | + SiteConfiguration $configuration |
|
| 251 | + ) { |
|
| 252 | + if ($objectType == '') { |
|
| 253 | + return null; |
|
| 254 | + } |
|
| 255 | + |
|
| 256 | + $baseurl = $configuration->getBaseUrl(); |
|
| 257 | + |
|
| 258 | + switch ($objectType) { |
|
| 259 | + case 'Ban': |
|
| 260 | + /** @var Ban $ban */ |
|
| 261 | + $ban = Ban::getById($objectId, $database); |
|
| 262 | + |
|
| 263 | + if ($ban === false) { |
|
| 264 | + return 'Ban #' . $objectId . "</a>"; |
|
| 265 | + } |
|
| 266 | + |
|
| 267 | + return 'Ban #' . $objectId . " (" . htmlentities($ban->getTarget()) . ")</a>"; |
|
| 268 | + case 'EmailTemplate': |
|
| 269 | + /** @var EmailTemplate $emailTemplate */ |
|
| 270 | + $emailTemplate = EmailTemplate::getById($objectId, $database); |
|
| 271 | + $name = htmlentities($emailTemplate->getName(), ENT_COMPAT, 'UTF-8'); |
|
| 272 | + |
|
| 273 | + return <<<HTML |
|
| 274 | 274 | <a href="{$baseurl}/internal.php/emailManagement/view?id={$objectId}">Email Template #{$objectId} ({$name})</a> |
| 275 | 275 | HTML; |
| 276 | - case 'SiteNotice': |
|
| 277 | - return "<a href=\"{$baseurl}/internal.php/siteNotice\">the site notice</a>"; |
|
| 278 | - case 'Request': |
|
| 279 | - /** @var Request $request */ |
|
| 280 | - $request = Request::getById($objectId, $database); |
|
| 281 | - $name = htmlentities($request->getName(), ENT_COMPAT, 'UTF-8'); |
|
| 282 | - |
|
| 283 | - return <<<HTML |
|
| 276 | + case 'SiteNotice': |
|
| 277 | + return "<a href=\"{$baseurl}/internal.php/siteNotice\">the site notice</a>"; |
|
| 278 | + case 'Request': |
|
| 279 | + /** @var Request $request */ |
|
| 280 | + $request = Request::getById($objectId, $database); |
|
| 281 | + $name = htmlentities($request->getName(), ENT_COMPAT, 'UTF-8'); |
|
| 282 | + |
|
| 283 | + return <<<HTML |
|
| 284 | 284 | <a href="{$baseurl}/internal.php/viewRequest?id={$objectId}">Request #{$objectId} ({$name})</a> |
| 285 | 285 | HTML; |
| 286 | - case 'User': |
|
| 287 | - /** @var User $user */ |
|
| 288 | - $user = User::getById($objectId, $database); |
|
| 289 | - $username = htmlentities($user->getUsername(), ENT_COMPAT, 'UTF-8'); |
|
| 290 | - |
|
| 291 | - return "<a href=\"{$baseurl}/internal.php/statistics/users/detail?user={$objectId}\">{$username}</a>"; |
|
| 292 | - case 'WelcomeTemplate': |
|
| 293 | - /** @var WelcomeTemplate $welcomeTemplate */ |
|
| 294 | - $welcomeTemplate = WelcomeTemplate::getById($objectId, $database); |
|
| 295 | - |
|
| 296 | - // some old templates have been completely deleted and lost to the depths of time. |
|
| 297 | - if ($welcomeTemplate === false) { |
|
| 298 | - return "Welcome template #{$objectId}"; |
|
| 299 | - } |
|
| 300 | - else { |
|
| 301 | - $userCode = htmlentities($welcomeTemplate->getUserCode(), ENT_COMPAT, 'UTF-8'); |
|
| 302 | - |
|
| 303 | - return "<a href=\"{$baseurl}/internal.php/welcomeTemplates/view?template={$objectId}\">{$userCode}</a>"; |
|
| 304 | - } |
|
| 305 | - default: |
|
| 306 | - return '[' . $objectType . " " . $objectId . ']'; |
|
| 307 | - } |
|
| 308 | - } |
|
| 309 | - |
|
| 310 | - /** |
|
| 311 | - * @param Log[] $logs |
|
| 312 | - * @param PdoDatabase $database |
|
| 313 | - * @param SiteConfiguration $configuration |
|
| 314 | - * |
|
| 315 | - * @return array |
|
| 316 | - * @throws Exception |
|
| 317 | - */ |
|
| 318 | - public static function prepareLogsForTemplate($logs, PdoDatabase $database, SiteConfiguration $configuration) |
|
| 319 | - { |
|
| 320 | - $userIds = array(); |
|
| 321 | - |
|
| 322 | - /** @var Log $logEntry */ |
|
| 323 | - foreach ($logs as $logEntry) { |
|
| 324 | - if (!$logEntry instanceof Log) { |
|
| 325 | - // if this happens, we've done something wrong with passing back the log data. |
|
| 326 | - throw new Exception('Log entry is not an instance of a Log, this should never happen.'); |
|
| 327 | - } |
|
| 328 | - |
|
| 329 | - $user = $logEntry->getUser(); |
|
| 330 | - if ($user === -1) { |
|
| 331 | - continue; |
|
| 332 | - } |
|
| 333 | - |
|
| 334 | - if (!array_search($user, $userIds)) { |
|
| 335 | - $userIds[] = $user; |
|
| 336 | - } |
|
| 337 | - } |
|
| 338 | - |
|
| 339 | - $users = UserSearchHelper::get($database)->inIds($userIds)->fetchMap('username'); |
|
| 340 | - $users[-1] = User::getCommunity()->getUsername(); |
|
| 341 | - |
|
| 342 | - $logData = array(); |
|
| 343 | - |
|
| 344 | - /** @var Log $logEntry */ |
|
| 345 | - foreach ($logs as $logEntry) { |
|
| 346 | - $objectDescription = self::getObjectDescription($logEntry->getObjectId(), $logEntry->getObjectType(), |
|
| 347 | - $database, $configuration); |
|
| 348 | - |
|
| 349 | - switch ($logEntry->getAction()) { |
|
| 350 | - case 'Renamed': |
|
| 351 | - $renameData = unserialize($logEntry->getComment()); |
|
| 352 | - $oldName = htmlentities($renameData['old'], ENT_COMPAT, 'UTF-8'); |
|
| 353 | - $newName = htmlentities($renameData['new'], ENT_COMPAT, 'UTF-8'); |
|
| 354 | - $comment = 'Renamed \'' . $oldName . '\' to \'' . $newName . '\'.'; |
|
| 355 | - break; |
|
| 356 | - case 'RoleChange': |
|
| 357 | - $roleChangeData = unserialize($logEntry->getComment()); |
|
| 358 | - |
|
| 359 | - $removed = array(); |
|
| 360 | - foreach ($roleChangeData['removed'] as $r) { |
|
| 361 | - $removed[] = htmlentities($r, ENT_COMPAT, 'UTF-8'); |
|
| 362 | - } |
|
| 363 | - |
|
| 364 | - $added = array(); |
|
| 365 | - foreach ($roleChangeData['added'] as $r) { |
|
| 366 | - $added[] = htmlentities($r, ENT_COMPAT, 'UTF-8'); |
|
| 367 | - } |
|
| 368 | - |
|
| 369 | - $reason = htmlentities($roleChangeData['reason'], ENT_COMPAT, 'UTF-8'); |
|
| 370 | - |
|
| 371 | - $roleDelta = 'Removed [' . implode(', ', $removed) . '], Added [' . implode(', ', $added) . ']'; |
|
| 372 | - $comment = $roleDelta . ' with comment: ' . $reason; |
|
| 373 | - break; |
|
| 374 | - default: |
|
| 375 | - $comment = $logEntry->getComment(); |
|
| 376 | - break; |
|
| 377 | - } |
|
| 378 | - |
|
| 379 | - $logData[] = array( |
|
| 380 | - 'timestamp' => $logEntry->getTimestamp(), |
|
| 381 | - 'userid' => $logEntry->getUser(), |
|
| 382 | - 'username' => $users[$logEntry->getUser()], |
|
| 383 | - 'description' => self::getLogDescription($logEntry), |
|
| 384 | - 'objectdescription' => $objectDescription, |
|
| 385 | - 'comment' => $comment, |
|
| 386 | - ); |
|
| 387 | - } |
|
| 388 | - |
|
| 389 | - return array($users, $logData); |
|
| 390 | - } |
|
| 286 | + case 'User': |
|
| 287 | + /** @var User $user */ |
|
| 288 | + $user = User::getById($objectId, $database); |
|
| 289 | + $username = htmlentities($user->getUsername(), ENT_COMPAT, 'UTF-8'); |
|
| 290 | + |
|
| 291 | + return "<a href=\"{$baseurl}/internal.php/statistics/users/detail?user={$objectId}\">{$username}</a>"; |
|
| 292 | + case 'WelcomeTemplate': |
|
| 293 | + /** @var WelcomeTemplate $welcomeTemplate */ |
|
| 294 | + $welcomeTemplate = WelcomeTemplate::getById($objectId, $database); |
|
| 295 | + |
|
| 296 | + // some old templates have been completely deleted and lost to the depths of time. |
|
| 297 | + if ($welcomeTemplate === false) { |
|
| 298 | + return "Welcome template #{$objectId}"; |
|
| 299 | + } |
|
| 300 | + else { |
|
| 301 | + $userCode = htmlentities($welcomeTemplate->getUserCode(), ENT_COMPAT, 'UTF-8'); |
|
| 302 | + |
|
| 303 | + return "<a href=\"{$baseurl}/internal.php/welcomeTemplates/view?template={$objectId}\">{$userCode}</a>"; |
|
| 304 | + } |
|
| 305 | + default: |
|
| 306 | + return '[' . $objectType . " " . $objectId . ']'; |
|
| 307 | + } |
|
| 308 | + } |
|
| 309 | + |
|
| 310 | + /** |
|
| 311 | + * @param Log[] $logs |
|
| 312 | + * @param PdoDatabase $database |
|
| 313 | + * @param SiteConfiguration $configuration |
|
| 314 | + * |
|
| 315 | + * @return array |
|
| 316 | + * @throws Exception |
|
| 317 | + */ |
|
| 318 | + public static function prepareLogsForTemplate($logs, PdoDatabase $database, SiteConfiguration $configuration) |
|
| 319 | + { |
|
| 320 | + $userIds = array(); |
|
| 321 | + |
|
| 322 | + /** @var Log $logEntry */ |
|
| 323 | + foreach ($logs as $logEntry) { |
|
| 324 | + if (!$logEntry instanceof Log) { |
|
| 325 | + // if this happens, we've done something wrong with passing back the log data. |
|
| 326 | + throw new Exception('Log entry is not an instance of a Log, this should never happen.'); |
|
| 327 | + } |
|
| 328 | + |
|
| 329 | + $user = $logEntry->getUser(); |
|
| 330 | + if ($user === -1) { |
|
| 331 | + continue; |
|
| 332 | + } |
|
| 333 | + |
|
| 334 | + if (!array_search($user, $userIds)) { |
|
| 335 | + $userIds[] = $user; |
|
| 336 | + } |
|
| 337 | + } |
|
| 338 | + |
|
| 339 | + $users = UserSearchHelper::get($database)->inIds($userIds)->fetchMap('username'); |
|
| 340 | + $users[-1] = User::getCommunity()->getUsername(); |
|
| 341 | + |
|
| 342 | + $logData = array(); |
|
| 343 | + |
|
| 344 | + /** @var Log $logEntry */ |
|
| 345 | + foreach ($logs as $logEntry) { |
|
| 346 | + $objectDescription = self::getObjectDescription($logEntry->getObjectId(), $logEntry->getObjectType(), |
|
| 347 | + $database, $configuration); |
|
| 348 | + |
|
| 349 | + switch ($logEntry->getAction()) { |
|
| 350 | + case 'Renamed': |
|
| 351 | + $renameData = unserialize($logEntry->getComment()); |
|
| 352 | + $oldName = htmlentities($renameData['old'], ENT_COMPAT, 'UTF-8'); |
|
| 353 | + $newName = htmlentities($renameData['new'], ENT_COMPAT, 'UTF-8'); |
|
| 354 | + $comment = 'Renamed \'' . $oldName . '\' to \'' . $newName . '\'.'; |
|
| 355 | + break; |
|
| 356 | + case 'RoleChange': |
|
| 357 | + $roleChangeData = unserialize($logEntry->getComment()); |
|
| 358 | + |
|
| 359 | + $removed = array(); |
|
| 360 | + foreach ($roleChangeData['removed'] as $r) { |
|
| 361 | + $removed[] = htmlentities($r, ENT_COMPAT, 'UTF-8'); |
|
| 362 | + } |
|
| 363 | + |
|
| 364 | + $added = array(); |
|
| 365 | + foreach ($roleChangeData['added'] as $r) { |
|
| 366 | + $added[] = htmlentities($r, ENT_COMPAT, 'UTF-8'); |
|
| 367 | + } |
|
| 368 | + |
|
| 369 | + $reason = htmlentities($roleChangeData['reason'], ENT_COMPAT, 'UTF-8'); |
|
| 370 | + |
|
| 371 | + $roleDelta = 'Removed [' . implode(', ', $removed) . '], Added [' . implode(', ', $added) . ']'; |
|
| 372 | + $comment = $roleDelta . ' with comment: ' . $reason; |
|
| 373 | + break; |
|
| 374 | + default: |
|
| 375 | + $comment = $logEntry->getComment(); |
|
| 376 | + break; |
|
| 377 | + } |
|
| 378 | + |
|
| 379 | + $logData[] = array( |
|
| 380 | + 'timestamp' => $logEntry->getTimestamp(), |
|
| 381 | + 'userid' => $logEntry->getUser(), |
|
| 382 | + 'username' => $users[$logEntry->getUser()], |
|
| 383 | + 'description' => self::getLogDescription($logEntry), |
|
| 384 | + 'objectdescription' => $objectDescription, |
|
| 385 | + 'comment' => $comment, |
|
| 386 | + ); |
|
| 387 | + } |
|
| 388 | + |
|
| 389 | + return array($users, $logData); |
|
| 390 | + } |
|
| 391 | 391 | } |
@@ -52,7 +52,8 @@ discard block |
||
| 52 | 52 | * |
| 53 | 53 | * @return int |
| 54 | 54 | */ |
| 55 | - $sortKey = function(DataObject $item) { |
|
| 55 | + $sortKey = function(DataObject $item) |
|
| 56 | + { |
|
| 56 | 57 | if ($item instanceof Log) { |
| 57 | 58 | return $item->getTimestamp()->getTimestamp(); |
| 58 | 59 | } |
@@ -296,8 +297,7 @@ discard block |
||
| 296 | 297 | // some old templates have been completely deleted and lost to the depths of time. |
| 297 | 298 | if ($welcomeTemplate === false) { |
| 298 | 299 | return "Welcome template #{$objectId}"; |
| 299 | - } |
|
| 300 | - else { |
|
| 300 | + } else { |
|
| 301 | 301 | $userCode = htmlentities($welcomeTemplate->getUserCode(), ENT_COMPAT, 'UTF-8'); |
| 302 | 302 | |
| 303 | 303 | return "<a href=\"{$baseurl}/internal.php/welcomeTemplates/view?template={$objectId}\">{$userCode}</a>"; |
@@ -13,91 +13,91 @@ |
||
| 13 | 13 | |
| 14 | 14 | class BlacklistHelper implements IBlacklistHelper |
| 15 | 15 | { |
| 16 | - /** @var HttpHelper */ |
|
| 17 | - private $httpHelper; |
|
| 18 | - /** |
|
| 19 | - * Cache of previously requested usernames |
|
| 20 | - * @var array |
|
| 21 | - */ |
|
| 22 | - private $cache = array(); |
|
| 23 | - /** @var string */ |
|
| 24 | - private $mediawikiWebServiceEndpoint; |
|
| 16 | + /** @var HttpHelper */ |
|
| 17 | + private $httpHelper; |
|
| 18 | + /** |
|
| 19 | + * Cache of previously requested usernames |
|
| 20 | + * @var array |
|
| 21 | + */ |
|
| 22 | + private $cache = array(); |
|
| 23 | + /** @var string */ |
|
| 24 | + private $mediawikiWebServiceEndpoint; |
|
| 25 | 25 | |
| 26 | - /** |
|
| 27 | - * BlacklistHelper constructor. |
|
| 28 | - * |
|
| 29 | - * @param HttpHelper $httpHelper |
|
| 30 | - * @param string $mediawikiWebServiceEndpoint |
|
| 31 | - */ |
|
| 32 | - public function __construct(HttpHelper $httpHelper, $mediawikiWebServiceEndpoint) |
|
| 33 | - { |
|
| 34 | - $this->httpHelper = $httpHelper; |
|
| 35 | - $this->mediawikiWebServiceEndpoint = $mediawikiWebServiceEndpoint; |
|
| 36 | - } |
|
| 26 | + /** |
|
| 27 | + * BlacklistHelper constructor. |
|
| 28 | + * |
|
| 29 | + * @param HttpHelper $httpHelper |
|
| 30 | + * @param string $mediawikiWebServiceEndpoint |
|
| 31 | + */ |
|
| 32 | + public function __construct(HttpHelper $httpHelper, $mediawikiWebServiceEndpoint) |
|
| 33 | + { |
|
| 34 | + $this->httpHelper = $httpHelper; |
|
| 35 | + $this->mediawikiWebServiceEndpoint = $mediawikiWebServiceEndpoint; |
|
| 36 | + } |
|
| 37 | 37 | |
| 38 | - /** |
|
| 39 | - * Returns a value indicating whether the provided username is blacklisted by the on-wiki title blacklist |
|
| 40 | - * |
|
| 41 | - * @param string $username |
|
| 42 | - * |
|
| 43 | - * @return false|string False if the username is not blacklisted, else the blacklist entry. |
|
| 44 | - */ |
|
| 45 | - public function isBlacklisted($username) |
|
| 46 | - { |
|
| 47 | - if (isset($this->cache[$username])) { |
|
| 48 | - $result = $this->cache[$username]; |
|
| 49 | - if ($result === false) { |
|
| 50 | - return false; |
|
| 51 | - } |
|
| 38 | + /** |
|
| 39 | + * Returns a value indicating whether the provided username is blacklisted by the on-wiki title blacklist |
|
| 40 | + * |
|
| 41 | + * @param string $username |
|
| 42 | + * |
|
| 43 | + * @return false|string False if the username is not blacklisted, else the blacklist entry. |
|
| 44 | + */ |
|
| 45 | + public function isBlacklisted($username) |
|
| 46 | + { |
|
| 47 | + if (isset($this->cache[$username])) { |
|
| 48 | + $result = $this->cache[$username]; |
|
| 49 | + if ($result === false) { |
|
| 50 | + return false; |
|
| 51 | + } |
|
| 52 | 52 | |
| 53 | - return $result['line']; |
|
| 54 | - } |
|
| 53 | + return $result['line']; |
|
| 54 | + } |
|
| 55 | 55 | |
| 56 | - try { |
|
| 57 | - $result = $this->performWikiLookup($username); |
|
| 58 | - } |
|
| 59 | - catch (CurlException $ex) { |
|
| 60 | - // LOGME log this, but fail gracefully. |
|
| 61 | - return false; |
|
| 62 | - } |
|
| 56 | + try { |
|
| 57 | + $result = $this->performWikiLookup($username); |
|
| 58 | + } |
|
| 59 | + catch (CurlException $ex) { |
|
| 60 | + // LOGME log this, but fail gracefully. |
|
| 61 | + return false; |
|
| 62 | + } |
|
| 63 | 63 | |
| 64 | - if ($result['result'] === 'ok') { |
|
| 65 | - // not blacklisted |
|
| 66 | - $this->cache[$username] = false; |
|
| 64 | + if ($result['result'] === 'ok') { |
|
| 65 | + // not blacklisted |
|
| 66 | + $this->cache[$username] = false; |
|
| 67 | 67 | |
| 68 | - return false; |
|
| 69 | - } |
|
| 70 | - else { |
|
| 71 | - $this->cache[$username] = $result; |
|
| 68 | + return false; |
|
| 69 | + } |
|
| 70 | + else { |
|
| 71 | + $this->cache[$username] = $result; |
|
| 72 | 72 | |
| 73 | - return $result['line']; |
|
| 74 | - } |
|
| 75 | - } |
|
| 73 | + return $result['line']; |
|
| 74 | + } |
|
| 75 | + } |
|
| 76 | 76 | |
| 77 | - /** |
|
| 78 | - * Performs a fetch to MediaWiki for the relevant title blacklist entry |
|
| 79 | - * |
|
| 80 | - * @param string $username The username to look up |
|
| 81 | - * |
|
| 82 | - * @return array |
|
| 83 | - * @throws CurlException |
|
| 84 | - */ |
|
| 85 | - private function performWikiLookup($username) |
|
| 86 | - { |
|
| 87 | - $endpoint = $this->mediawikiWebServiceEndpoint; |
|
| 77 | + /** |
|
| 78 | + * Performs a fetch to MediaWiki for the relevant title blacklist entry |
|
| 79 | + * |
|
| 80 | + * @param string $username The username to look up |
|
| 81 | + * |
|
| 82 | + * @return array |
|
| 83 | + * @throws CurlException |
|
| 84 | + */ |
|
| 85 | + private function performWikiLookup($username) |
|
| 86 | + { |
|
| 87 | + $endpoint = $this->mediawikiWebServiceEndpoint; |
|
| 88 | 88 | |
| 89 | - $parameters = array( |
|
| 90 | - 'action' => 'titleblacklist', |
|
| 91 | - 'format' => 'php', |
|
| 92 | - 'tbtitle' => $username, |
|
| 93 | - 'tbaction' => 'new-account', |
|
| 94 | - 'tbnooverride' => true, |
|
| 95 | - ); |
|
| 89 | + $parameters = array( |
|
| 90 | + 'action' => 'titleblacklist', |
|
| 91 | + 'format' => 'php', |
|
| 92 | + 'tbtitle' => $username, |
|
| 93 | + 'tbaction' => 'new-account', |
|
| 94 | + 'tbnooverride' => true, |
|
| 95 | + ); |
|
| 96 | 96 | |
| 97 | - $apiResult = $this->httpHelper->get($endpoint, $parameters); |
|
| 97 | + $apiResult = $this->httpHelper->get($endpoint, $parameters); |
|
| 98 | 98 | |
| 99 | - $data = unserialize($apiResult); |
|
| 99 | + $data = unserialize($apiResult); |
|
| 100 | 100 | |
| 101 | - return $data['titleblacklist']; |
|
| 102 | - } |
|
| 101 | + return $data['titleblacklist']; |
|
| 102 | + } |
|
| 103 | 103 | } |
| 104 | 104 | \ No newline at end of file |
@@ -66,8 +66,7 @@ |
||
| 66 | 66 | $this->cache[$username] = false; |
| 67 | 67 | |
| 68 | 68 | return false; |
| 69 | - } |
|
| 70 | - else { |
|
| 69 | + } else { |
|
| 71 | 70 | $this->cache[$username] = $result; |
| 72 | 71 | |
| 73 | 72 | return $result['line']; |